A judge has dismissed most of the Securities and Exchange Commission’s (SEC) fraud charges against SolarWinds related to statements made before and after the 2020 Russian cyber espionage campaign.

The SEC accused SolarWinds of misleading investors about its cybersecurity practices. However, U.S. District Judge Paul Engelmayer ruled that SolarWinds did not mislead investors in IPO registration documents and 8-K filings. The SEC can still pursue charges against the company’s pre-attack website statements about its cybersecurity strategy.

SolarWinds plans to fight the remaining charge, which it claims is “factually inaccurate.” The company has 14 days to respond.