SolarWinds breach could leave Colorado firms vulnerable
Colorado investment advisers are being warned by the state’s Division of Securities to watch out for potential data breaches from the SolarWinds Orion software after a large-scale breach of software company’s data last month.
The Division, part of the state’s Department of Regulatory Affairs, sent the advisory Thursday morning.
No data was immediately available about Colorado companies or advisers being hacked because of the SolarWinds breach.
“We sent this alert out because this is really big hack of SolarWinds and IT administrators at a lot of firms should be aware,” said Tung Chan, Colorado’s commissioner of securities.
Hacked networks will need to be burned ‘down to the ground’
SolarWinds Orion software is used by many Fortune 500 companies, every branch of the U.S. military, large U.S. telecommunications companies, and many other government branches such as the Department of Justice and National Security Agency.
“Malicious actors are exploiting SolarWinds Orion products containing SUNBURST malware to gain access to network traffic management systems,” the FBI said.
Little-known SolarWinds gets scrutiny over hack, stock sales
Malware attacks are when a victim’s computer data is taken over by hackers, “including achieving full privileged persistent access through trusted legitimate credentials, accounts, and applications,” the FBI said.
Chan said Colorado securities firms are required to have cybersecurity plans and policies in place.
“We are all online more, using the internet more with all this remote working,” Chan said. “It’s a bigger issue than just one industry like securities.”
The state release provided links to the FBI’s advisory on the SolarWinds hack with guidance on addressing it, as well as an information link from SolarWinds.
Federal court system’s sealed records likely breached by SolarWinds hack
“Any firm with known malicious versions of the SolarWinds Orion software should contact its primary regulator,” the release said.
State-registered investment advisers and intrastate broker dealers in Colorado should contact the division at 303-894-2320 or email at dora_SecuritiesWebsite@state.co.us.


