Is it due to the SolarWinds Orion exploit?

https://cyber.dhs.gov/ed/21-01/