SolarWinds Data Breach & Cozy Bear Hack Claims

Data Breach Lawyer investigating SolarWinds data breach claims, suspected hacking incidents & privacy misuse litigation.

Around two dozen computers in a Cisco lab were compromised through malicious software updates to SolarWinds’ Orion network, according to major media outlets. Any company or individual impacted by the SolarWinds data breach may have a claim. Contact a data breach attorney to investigate the extent of your financial and privacy concerns.

Cisco, Microsoft, VMware, FireEye, and other tech companies have spoken about the SolarWinds data breach, led by suspected Russian hackers, according to major media outlets. Cisco does not use SolarWinds Orion to manage its networks, but the company said it is investigating all aspects of the security breach. Network management and network monitoring are key components of Cisco’s machinery and software, which are meant to monitor data traffic moving through a network.

Access to such data avenues can possibly create potential for serious harm and data theft. The breach is likely to have exposed consumer data, and an investigation is underway. Malicious actors tapping into any network raises major concern for companies and consumers. Software vulnerabilities allow for hacking and illegal access to sensitive and high-value targets throughout the tech supply chain.

Joe Lyon is an experienced Cincinnati Privacy Attorney investigating SolarWinds data breach claims and other data misuse litigation.

Several organizations have already been identified as victims of the SolarWinds security breach, including think tanks, non-governmental organizations (NGOs), as well as the U.S. Departments of Defense, State, Treasury, Homeland Security, Commerce, and National Institutes of Health.

Microsoft has stated that 44 percent of the company’s customers compromised through SolarWinds are in the IT sector, including equipment providers, software and security firms—around 80 percent of which are located in the United States.

Russian Security Breach Claims

American officials are claiming that a group of Russian hackers known as apt29, or Cozy Bear, thought to be part of Russia’s foreign intelligence service, is behind the hack of several American government institutions where they could read emails.

On December 17th, the DHS’s Cybersecurity and Infrastructure Security Agency (CISA) released an alert on the SolarWinds data breach, noting that CISA had evidence of additional access points other than the SolarWinds Orion platform. Only a handful of customers targeted by the SolarWinds hack have been made public, though the fallout is likely to grow in the coming weeks.

New victims in the public and private sector are facing costly, disrupting work in determining their vulnerability and review what data may have been compromised.