SolarWinds cyberattack: At least 200 victims identified in suspected Russian hacking

At least 200 organisations, including government agencies and companies around the world, have been hacked as part of a suspected Russian cyber-attack that implanted malicious code in a widely used software program, said a cybersecurity firm and three people familiar with ongoing investigations.

The number of actual hacking victims has been one of many unanswered questions surrounding the cyber-attack, which used a backdoor in SolarWinds Corp’s Orion network management software as a staging ground for further attacks.

As many as 18,000 SolarWinds’ customers received a malicious update that included the backdoor, but the number that was actually hacked — meaning the attackers used the backdoor to infiltrate computer networks — is likely to be far fewer.