Assuming the story is real it is quite obvious that there aren't that many compromised motherboards. It wouldn't make sense and it would make the attack easier to detect and to publicly incriminate the culprit.
As the attack is said to have been discovered 3 years ago it is also not surprising that housekeeping has already been done a long time ago.
Supermicro is a fairly large player (4th largest) and they still manufacture servers. If this story were indeed true, none of these companies or any other company buy their servers. The story is simply fake news.
Big companies are now scandal proof. No amount of negligence or criminality is bad enough to bring one down.
Wells Fargo committed millions of counts of bank fraud, yet they still exist and people buy their services.
BP destroyed a large part of the economy and ecosystem in the Gulf of Mexico, yet they still exist and people buy their products. One of their top lawyers just became Assistant Attorney General for the Department of Justice’s Environment and Natural Resources Division.
VW built millions of cars with hardware designed to fake emissions testing data, yet they still exist and people buy their services.
Crimes are committed by individuals, not companies. If execs at VW break the law, you go after the execs, you don’t put the whole company in jail or turf out all it’s employees on the streets.
I’m not saying there shouldn’t be repercussions, check my comment again, but there’s no point putting the bank tellers out of work because their bosses, bosses, bosses, bosses boss broke the law.
I'd be on board with this position if it was applied consistently. But it's not. Companies take political action, companies take credit for innovation, etc. The whole basis of a company is that it limits the liability of the people who own it.
Obviously no-one would have publicised this, so if you weren't involved you would have had no idea.
The story does report that Amazon completely dropped Supermicro as a supplier following this alleged hack (that should be verifiable even if the reason given would obviously be different).
As the attack is said to have been discovered 3 years ago it is also not surprising that housekeeping has already been done a long time ago.