Historical record Record 2020-004

2020 World Events · Pandemic shock, supply-chain compromise, and high-intensity war

SolarWinds supply-chain compromise

Attackers compromised SolarWinds software updates to access government and corporate networks.

Read the record View in 2020 chronology Compare this record

Evidence-led reading

What is stated, why it matters, and what remains uncertain

What this is

A specific-event record selected from the protected World Events source ledger for cross-year research. It is not an exhaustive account of 2020.

Why it matters

It became a defining software supply-chain espionage case.

What is established here

The page faithfully exposes the submitted record and its source boundary. No claim-level evidence packet has yet upgraded the record beyond a research starting point.

What remains uncertain

Starting-point source from the submitted dataset; verify exact dates, attribution, legal posture, casualty figures, and current status before reuse.

Record narrative

Source-bounded summary

Attackers compromised SolarWinds software updates to access government and corporate networks.

Why the ledger includes it

It became a defining software supply-chain espionage case.

Structured fields

Record at a glance

Stable record ID: 2020-004
Date or period: 2020-12 disclosed
Type: Cyber espionage
Focus: Cyber / espionage
Impact scope: Global
Priority: 5 of 5
Location label: Global cyberspace, United States / global
Coordinate precision: Cyberspace: no single coordinate
Actors named by the source record: Russian SVR attributed; SolarWinds; U.S. agencies; companies
Verification state: source-start-point; sensitive details require independent verification

Geographic context

A coordinate locator, not a surveyed event footprint

No supportable coordinate is supplied for this record. The location label remains descriptive rather than geospatial.

Review location and coordinate boundaries

Coordinate unavailableThe archive will not invent a point where the source record does not support one.

Source and verification boundary

This remains a starting-point record

Starting-point source from the submitted dataset; verify exact dates, attribution, legal posture, casualty figures, and current status before reuse.

Open starting-point source Find independent archives

Structured comparison set

These links use exact focus, event-type, location-label, impact-scope, and nearby-year fields. They do not claim causation, coordination, equivalence, or a single historical narrative.

20212021-03

Microsoft Exchange Hafnium campaign

Same research focus
Same impact scope
Nearby year

Attackers exploited Microsoft Exchange Server vulnerabilities at scale before patches were widely applied.

Open comparison record Compare both

20172017-06-27 onward

NotPetya destructive cyberattack

Same research focus
Same impact scope

Malware disguised as ransomware spread from Ukrainian tax software into global networks, causing massive damage.

Open comparison record Compare both

20162016

DNC hack and election influence campaign

Same research focus
Same impact scope

C. in United States. Hack-and-leak operations and online influence activity targeted the U.S. election environment.

Open comparison record Compare both

20242024-03

XZ Utils backdoor discovered

Same research focus
Same impact scope

A sophisticated backdoor attempt in XZ Utils was discovered before broad deployment into major Linux distributions.

Open comparison record Compare both

Citation and correction

Use the stable record ID and challenge individual propositions

A correction may concern the date, place, actors, attribution, legal status, figures, coordinate precision, source characterization, or why-pivotal summary without invalidating every other field.

Suggested citation

2IA — International Intelligence Archive. “SolarWinds supply-chain compromise.” World Events record 2020-004. Reviewed July 27, 2026. https://2ix.org/world-events/2020/2020-004/

Submit a correction Read methodology