Avaya Avaya Holdings Corp. is a global provider of digital communications products and services for large enterprises and governments. The SEC order against Avaya found that the company's post-incident disclosures in its Form 10-Q filed in February 2021 made materially misleading statements regarding a cyberattack discovered in December 2020 that resulted from the SolarWinds Orion compromise. The SEC found that the company knew that a threat actor had accessed at least 145 files in its cloud filesharing platform, some of which contained confidential and/or proprietary information, including third-party application passwords, internal security procedures, instructions regarding remote access, and product configuration information for at least one customer. However, its Form 10-Q disclosure omitted this information and only indicated that a threat actor had accessed a limited number of the company's email messages.