The list of known victims is growing, as SolarWinds says about 18,000 customers may be affected.