Guiding SLTTs Through the SolarWinds Supply Chain Attack

In December 2020, a sophisticated supply chain attack on SolarWinds’ Orion platform allowed threat actors to infiltrate thousands of organizations, including U.S. government agencies and critical infrastructure. By embedding a hidden backdoor into legitimate software updates, attackers gained persistent, stealthy access to sensitive systems and data.

This case study highlights how the Multi-State Information Sharing and Analysis Center guided SLTT organizations through the incident—providing timely intelligence, mitigation strategies, and expert support to help detect threats, limit exposure, and strengthen long-term cybersecurity resilience.