Between March and June of 2020, SolarWinds deployed Orion software updates or patches to its customers, which unfortunately included this Sunburst malware without SolarWinds knowledge, permitting the threat actors access to the impacted networks of the customer. SolarWinds later disclosed that approximately 18,000 of its 33,000 Orion customers may have installed that malware, which permitted the threat actors to have access to the networks, systems, and data of thousands of customers, including government agencies and private sector companies. In December of 2020, SolarWinds Orion customer Mandiant, a cybersecurity company impacted by the compromise, notified SolarWinds of December's attack. This is the first time malware has been deployed via software update at this magnitude. It's really changed the landscape for supply chain attacks.