The United States Securities and Exchange Commission (SEC) has not only filed charges against SolarWinds on account of the attack, it has also filed charges against CISO Timothy Brown. Yes, the SEC is attempting to hold CISO Timothy Brown personally liable.

Source: Cyber Talk