In 2020, the Russian SVR—that’s its foreign intelligence service—hacked the update servers belonging to a network management software developer named SolarWinds. SolarWinds boasted over 300,000 customers worldwide, including most of the Fortune 500 and much of the US government. The SVR installed a backdoor into an update to one of the company’s products, Orion, and then waited.

