Brandon Wales, the acting director of the Cybersecurity and Infrastructure Security Agency, told the Wall Street Journal 30 percent of breached federal agencies and private firms had no direct connection to SolarWinds.