In 2024, the SEC suffered a significant setback in SolarWinds, one of its highest profile actions related to cybersecurity. In 2023, the SEC had filed an action against SolarWinds and its Chief Information Security Officer (CISO) related to a cybersecurity incident known as SUNBURST. The attack was conducted over nearly two years by Russian-backed hackers and is considered one of the worst cyber-incidents in U.S. history, exacerbated by the fact that several U.S. government agencies relied on SolarWinds software.