United Kingdom’s Information Commissioner’s Office has warned organizations that fell victim to the SolarWinds hack that they are required to report data breaches within three days after their discovery. UK independent authority urged organizations to check for evidence of attackers infiltrating their network and gaining access to personal information. Those at risk of a breach should immediately check if the software version they use is one of the malicious builds used to deploy the Sunburst backdoor i.e., versions 2019.4 HF 5, 2020.2 with no hotfix installed.
Source: https://www.bleepingcomputer.com/news/security/uk-privacy-watchdog-warns-solarwinds-victims-to-report-data-breaches/