it is much easier for highly skilled hacker to get fake identity and get employed at SW than to compromise an employee - although this is longer term play
Wouldn't Google, Apple etc do background checks that discovered fake identities? Or is it not so easy with background checks?
Maybe SolarWinds would be less careful though?
I incorrectly assumed they'd try to get a fake US passport/identity.