SolarWinds investors allege board knew about cyber risks
Reprints
(Reuters) — SolarWinds Corp. investors have sued the software company's directors, alleging they knew about and failed to monitor cybersecurity risks to the company ahead of a breach that created a vulnerability in thousands of its customers' systems.
The lawsuit filed in Delaware Thursday appears to be the first based on records shareholders demanded from the company after Reuters reported last December that malicious code inserted into one of the company's software updates left U.S. government agencies and companies exposed.
The lawsuit names a mix of current and former directors as defendants.
Led by a Missouri pension fund, the investors allege that the board failed to implement procedures to monitor cybersecurity risks, such as requiring the company's management to report on those risks regularly.
They are seeking damages on behalf of the company and to reform the company's policies on cybersecurity oversight.
The lawsuit is the latest fallout over the breach of SolarWinds' software, which gave hackers access to the data of thousands of companies and government offices that used its products and which U.S. officials have attributed to Russia.
SolarWinds has said it is cooperating with investigations into the breach by the U.S. Securities and Exchange Commission, Department of Justice and others. The company has moved to dismiss another shareholder lawsuit seeking damages for a decline in its share price.
Read Next
-
SolarWinds bolsters cybersecurity in wake of hack
The hack of SolarWinds Inc. that compromised customers including U.S. government agencies has led to a more robust cybersecurity program at the company, SolarWinds officials said Thursday during a webinar.
