SolarWinds Security Advisory
Updated: July 13, 2021
Zywave does utilize some SolarWinds software products within its infrastructure. In response to the Security Advisory released by SolarWinds on Dec. 13, 2020, Zywave initiated an investigation to determine if the potential vulnerabilities announced by SolarWinds were exploited within Zywave. After completing a detailed investigation, Zywave found no known indications of compromise on any Zywave systems, or from any relevant Zywave vendors with potential access to Zywave systems.
Regarding the post from the Microsoft Threat Intelligence Center on July 13, 2021, Zywave does not utilize the affected SolarWinds software, Serv-U, within its infrastructure. Out of an abundance of caution, Zywave completed an investigation for known indications of compromise related to this issue. No known indications of compromise related to this issue were found on any Zywave systems.
Zywave has continued to install all relevant software releases from SolarWinds, ensuring that the Zywave SolarWinds infrastructure is up to date. To increase overall system security, additional measures have been implemented to further isolate the SolarWinds software within Zywave infrastructure.
Based on the evidence from the Zywave investigation, no data breach occurred. Zywave continues to evaluate and modify its security posture, not only in response to this specific incident, but also in response to the ever-changing security landscape.