Senator Wyden thinks that the Solarwinds breach could have provided valuable insight to prevent incidents like this one.<p>" On May 12, 2021, President Biden issued Executive Order 14028, which among other things, created a Cyber Safety Review Board, whose first task would be to study the SolarWinds incident. That review never took place — the Board was subsequently directed by the Department of Homeland Security to study another hacking incident. I have repeatedly pushed CISA and DHS to direct the Board to study the SolarWinds incident, but have been rebuffed. Had that review taken place, it is quite likely that Microsoft’s poor data security practices around encryption keys would have come to light, and this most recent incident might have been averted. "<p>[PDF]
<a href="https://www.documentcloud.org/documents/23888590-wyden_letter_to_cisa-doj-ftc_re_2023_microsoft_breach" rel="nofollow noreferrer">https://www.documentcloud.org/documents/23888590-wyden_lette...</a>