Maybe I’m not remembering things right, but the solarwinds attack was a supply chain attack.
You aren’t misremembering, that’s what we were all told however the reality was a bit different. MS had been ignoring a serious security vulnerability for years. That vuln was eventually used to breech SolarWinds and then that was leverage to breech everyone else.