SolarWinds will contest a lawsuit brought by the Securities and Exchange Commission (SEC) against it and its chief information security officer (CISO) alleging fraud and internal control failures related to the software company’s cyberattack reported in 2020.

The SEC announced charges against SolarWinds and CISO Tim Brown on Monday for “defraud[ing] investors by overstating SolarWinds’ cybersecurity practices and understating or failing to disclose known risks.” The agency is seeking permanent injunctive relief, disgorgement with prejudgment interest, civil penalties, and an officer-and-director bar against Brown in its litigation.

A SolarWinds spokesperson said in an emailed statement the company was disappointed by the SEC’s lawsuit and “deeply concerned” the action puts national security at risk. “The SEC’s determination to manufacture a claim against us and our CISO is another example of the agency’s overreach and should alarm all public companies and committed cybersecurity professionals across the country,” the statement read.