On December 12, 2020, SolarWinds learned that malware had been inserted in its software, potentially granting hackers access to thousands and thousands of its 300,000 customers. General Counsel Jason Bliss needed to orchestrate the company response without knowing how many of its 300,000 customers had been affected, or how severely. The SolarWinds CEO was already scheduled to step down within three weeks, and the incoming CEO was as yet unaware of the incident. Bliss needed to address three immediate issues. First, was the incident a material event, and if so, what information did SolarWinds need to whom, when? Second, what posture should SolarWinds take with respect to its customers and to the media, where the news was expected to break within a day? Third, what assistance could SolarWinds expect to receive from either the private sector or from governments, in addressing the potential crisis?