The Securities and Exchange Commission ( SEC ) filing alleges that SolarWinds failed to disclose adequate material information to investors regarding cybersecurity risks. The filing states that the company and its CISO Timothy Brown only disclosed generic and hypothetical risks despite internal knowledge of specific deficiencies in SolarWinds' cybersecurity practices and a heightened threat possibility.