Cybersecurity Due Diligence Is Crucial In All M&A—Including Energy M&A Transactions

A Cautionary Tale in Cybersecurity Due Diligence

Can a single data breach kill or sideline a deal? Perhaps so. Last month Verizon signaled that Yahoo!'s disclosure of a 2014 cyberattack might be a "material" change to its July $4.83 billion takeover bid—which could lead Verizon to renegotiate or even drop the deal entirely. Concern over cybersecurity issues is not unique to technology or telecommunications combinations. In a 2016 NYSE Governance Services survey of public company directors and officers, only 26% of respondents would consider acquiring a company that recently suffered a high-profile data breach—while 85% of respondents claimed that it was "very" or "somewhat" likely that a major security vulnerability would affect a merger or acquisition under their watch (e.g., 52% said it would significantly lower valuation).