All Breaches
December 13, 2020 Verified Technology

SolarWinds Data Breach

In December 2020, IT management software vendor SolarWinds disclosed that it had fallen victim to a highly sophisticated nation-state supply chain compromise.

18 Thousand
Affected People
4
Data Types
Medium
Severity
Oct 27, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

4
  • Internal corporate data
  • Source code
  • Business email addresses
  • Encrypted keys

About This Breach

Attributed to the Russian Foreign Intelligence Service (SVR / APT29), the threat actors infiltrated SolarWinds' software build environment and injected a malicious backdoor known as SUNBURST into official updates of the Orion network monitoring platform. The compromised software was subsequently deployed across approximately 18,000 public and private organizations, including multiple United States federal government agencies.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information