FTI Consulting Study Reveals Cybersecurity Attacks Are an Increasing Threat to M&A
FTI Consulting (NYSE: FCN) released CISO Redefined III on March 17, 2026, finding cybersecurity incidents are increasingly tied to M&A transactions.
Sentiment and the balance of points
Rhea-AI Sentiment reads the wording of the document, how positive or negative its language is on a 1 to 5 scale. The balance of points shown with the takes weighs what the document actually discloses, so the two can disagree, for example when a trial that missed its main goal is described in upbeat language.
Rhea-AI Summary
FTI Consulting (NYSE: FCN) released CISO Redefined III on March 17, 2026, finding cybersecurity incidents are increasingly tied to M&A transactions. Nearly 1 in 4 executives experienced a cyber incident during or shortly after a deal; 42% reported significant deal value reduction and 58% said financial targets were impaired.
The survey of 278 senior leaders was conducted August 12–26, 2025, and highlights gaps in CISO involvement, post-close diligence, and cross-team collaboration that create material exposure for dealmakers.
Positive
- 67% of heads of M&A view the CISO as very critical during transactions
- 76% of general counsel view the CISO as very critical during transactions
- Survey sampled 278 senior leaders across companies with ≥500 employees (Aug 12–26, 2025)
Negative
- 42% of respondents reported significant deal value reduction due to cyber incidents
- 58% said financial targets were impaired following cyber incidents
- 20% of deals were delayed or paused because of a cyber incident
- 34% of CISOs are not heavily involved in transaction decisions
- 23% of executives manage cybersecurity risks proactively after close
Details
News Market Reaction – FCN
On Mar 17, the day this news came out, FCN closed 0.93% above the previous close.
Data tracked by StockTitan Argus for the Mar 17 session.
Key Figures
- Executives with cyber incident
- Nearly 1 in 4
- Executives experiencing a cyber incident during or shortly after a transaction
- Deal value reduction
- 42%
- Respondents experiencing significant deal value reduction after cyber incident
- Financial targets impaired
- 58%
- Executives reporting impaired financial targets due to cyber incidents
- Deals delayed or paused
- 20%
- Executives saying deals were delayed or paused by a cyber incident
- CISOs see quick-close pressure
- 1 in 4
- CISOs whose leaders push to close deals quickly over cyber due diligence
- Post-close proactive risk management
- 23%
- Executives who manage cybersecurity risks proactively post-close
- Survey participants
- 100 CISOs / 78 heads of M&A / 100 general counsel
- Sample sizes in U.S.-based organizations survey (Aug 12–26, 2025)
- Company market cap
- $5 billion or more
- Majority of surveyed companies’ market capitalization
Historical Context
-
Report highlighting rapid generative AI adoption in corporate legal departments.
-
Election of Angela Nam as CFO with prior high-growth aviation experience.
-
Appointment of Carrie Grimes to strengthen mining transformation practice.
-
Record 2025 revenues, strong EPS and guidance, plus sizable buybacks.
-
Addition of Scott Davidson to lead aviation-focused business transformations.
24h Move is the share-price change in the day after each event; other market factors may also have contributed.
Key Terms
ciso technical
m&a financial
cybersecurity technical
AI-generated analysis. How Rhea-AI works. Not financial advice.
Third Installment of CISO Redefined Series Highlights Correlation between Cyber Attacks and Transactions, an Emerging Risk for Dealmakers as M&A Volumes Rebound
WASHINGTON, March 17, 2026 (GLOBE NEWSWIRE) -- FTI Consulting, Inc.’s (NYSE: FCN) Cybersecurity and Data Privacy Communications practice today released the third installment of its “CISO Redefined” series, CISO Redefined III: Navigating Cybersecurity Risks in Transactions, which looks at the increasing correlation between cybersecurity incidents and corporate transactions.
According to the findings, nearly 1 in 4 executives has experienced a cyber incident during or shortly after a transaction, with nearly half of respondents (
“Threat actors are smart; they read the news and know companies tend to be vulnerable when they’re trying to close or right after when they’re integrating systems — and that’s when they try to break in,” said Meredith Griffanti, Global Head of the Cybersecurity and Data Privacy Communications practice at FTI Consulting. “The incident ends up costing the acquirer big time, and most often, the target and acquirer haven’t even begun to think about how to integrate their security plans, let alone how they’ll work together to respond to a cyber crisis if it occurs right after a deal closes. That lack of coordination can have serious blowback on reputation.”
According to CISO Redefined II, which was released in 2024, the vast majority of CISOs feel their role is misunderstood by company leadership, and they struggle to communicate in a non-technical way that other executives can understand. This sentiment explains the results of the latest survey, which show that the CISO’s voice and opinions — and therefore cyber risk — are not being prioritized.
Going further,
Other key findings:
- One in 4 CISOs say their leaders push to close deals quickly over conducting thorough cybersecurity due diligence.
- Only
17% of CISOs said that collaboration between cybersecurity and corporate development teams significantly increased during the transaction period. By contrast,34% of general counsel felt collaboration significantly increased — showing a notable disconnect. - Only
23% of executives say they manage cybersecurity risks proactively post-close. This decline in vigilance creates a meaningful exposure point for the organization, which coincides with when attacks tend to occur.
“Deal teams need to account for cyber risk much the same way we think about leak risk. These unexpected disruptions can create confusion, shift value and slow negotiations,” said Pat Tucker, Americas Head of M&A and Activism at FTI Consulting. “It is essential that dealmakers recognize that transactions are increasingly becoming highly visible targets for threat actors. If deal value is going to be successfully realized, this risk needs to be mitigated more effectively.”
Survey Methodology
FTI Consulting surveyed 100 CISOs, 78 heads of M&A, and 100 general counsel across U.S.-based public and private organizations with at least 500 employees, representing a majority of companies with a market cap of
About FTI Consulting
FTI Consulting, Inc. is a leading global expert firm for organizations facing crisis and transformation, with more than 8,100 employees located in 32 countries and territories as of December 31, 2025. In certain jurisdictions, FTI Consulting’s services are provided through distinct legal entities that are separately capitalized and independently managed. The Company generated
FTI Consulting, Inc.
555 12th Street NW
Washington, DC 20004
+1.202.312.9100
Investor Contact:
Mollie Hawkes
+1.617.747.1791
mollie.hawkes@fticonsulting.com
Media Contact:
Nick Emmons
+1.617.510.1676
nick.emmons@fticonsulting.com
FAQ
AI-generated questions and answers. How Rhea-AI works. Not financial advice.