Cyber Security Concerns in M&A Transactions

Apr 13, 2016

Cyber Security Concerns in M&A Transactions 

By John Lonnquist

               Why is cyber security such an important consideration in mergers and acquisitions? Because you could be buying an enormous amount of unknown liability.  Cyber security is becoming a key factor in analyzing the amount of risk that a financial strategic buyer will take on after an acquisition.  A company’s ability to effectively protect its systems and data and mitigate its exposure will have a direct effect on how much a potential buyer is willing to pay for an acquisition. 

               What is the cyber risk in and M&A transaction?  While acquisition specific, in a nutshell it could be the following:

  • Theft of intellectual property or trade secrets
  • Loss of sensitive business information and strategies
  • Loss of customer/employee data
  • damages to reputation and employee/consumer confidence
  • Litigation and compliance risk
  • Remedial expenditures
  • Loss of shareholder value

               So, generally speaking, what should an acquirer look for when assessing a merger or acquisition?

  • Ensure the seller has strong cyber security and data privacy programs and protection
    • Identify and evaluate data risks
    • Identify and evaluate regulatory risks
    • Is there an emergency response plan in place, has it ever been implemented (or tested) in the past?
    • What cyber security insurance coverage is in place?
    • Identification of legacy systems
  • Understand the liabilities the buyer may be assuming at closing
  • Incorporate any liabilities into appropriate documents for the M&A transaction in the form of price adjustments, hold-backs representations, warranties, and indemnities.


To fully evaluate the cyber security risks in an M&A transaction specialized cyber security consultants should be hired along with legal counsel. Both the legal and technical risks need to be fully evaluated so that the risks can be properly allocated, the price can be properly adjusted and contingencies can be put in place before completing the transaction.  The last thing a buyer wants is to find themselves to be the proud owner of a company facing a cyber security lawsuit.  The attorneys at MLMW regularly handle M&A transactions and work with outstanding cyber security consultants and advisors. 


(Mallon Lonnquist Morris & Watrous, PLLC, is a business, employment, real estate, and litigation law firm. John Lonnquist is a Colorado business attorney with MLMW, based in Denver, Colorado. John regularly represents clients on cyber security matters and M&A transactions. John can be reached at jlonnquist@mlmw-law.co and (303) 722-8261)

Category: M&L Legal Posts

Category List

Tag List

Colorado at-will employment (1)
Credit Card Data (1)
Master Services Agreement (2)
Colorado Construction (1)
Denver Business Law (1)
Wrongful Death Settlement (1)
Legal Updates (5)
Construction (6)
Employment Law (5)
Stock Options (1)
Corporate Law (8)
Denver Business Journal (2)
Certifiably Green Denver (1)
Construction Bond Claims (2)
ADR (2)
Colorado Hispanic Bar Association (1)
Spanish Legal Services (10)
Finance Law (2)
Business Disputes (9)
Non-Compete (2)
Ethics (1)
subcontractor negotiations (2)
Denver Colorado Business Attorney (9)
Data Breach (2)
Property Surveys (1)
Business Attorney (2)
indemnifications (3)
Colorado Wrongful Death (1)
Colorado attorney mentor (2)
cyber security (3)
Colorado Enforcement of Non-Compete (2)
Colorado business disputes (1)
Arbitration (5)
Non-Competition Agreements (12)
Colorado Lis Pendens (1)
CO Business Non-Solicitation Restrictions (1)
Construction Contracts (5)
Business (11)
Co-Ownership Agreement (1)
Denver Broncos (1)
Research (1)
Colorado LLC (1)
Taxes (1)
Enforcing Non-Solicitation Agreement (1)
Our Courts Colorado (1)
Contracts (3)
Leasing Standard (1)
Non-Compete, Colorado non-compete restrictions, enforcing non-compete, protecting Colorado business (1)
cause for termination (1)
Colorado Foundation for Water Education (1)
Snowboard Gear (1)
Leases (8)
Business Litigation (6)
Commercial Property (3)
Panelist (1)
CO Ski and Snowboard Gear Recall (1)
Helmet Recall (1)
Colorado Real Estate (11)
courts (1)
Litigation (19)
Landowners (1)
Denver Real Estate (1)
Business Contracts (9)
Lease Negotiations (2)
Labor (3)
Business Services (8)
Mechanic's Liens (1)
Spanish Business Law (9)
Legal Services (1)
For Employers (5)
Non-Solicitation (1)
Trade Secrets (6)
Colorado Employment (20)
Colorado Spanish Legal Services (1)
Colorado Business (56)
Cherry Creek Chamber of Commerce (1)
Colorado Judicial Institute (1)
St. Anthony, Minnesota (1)
County Court (1)
ABA (1)
Real Estate (7)
Reed Morris (1)
Denver Sustainable Law Firm (1)
Mediation (1)
Breach of Contract (4)
Commercial Real Estate (3)
Incentive Plans (1)
Employment (9)
Resolutions (1)
American Bar Association (2)
Cell Tower Leases (1)
Non-Disclosure (1)
Phantom Stock (1)
Resolving Business Disputes (1)
CO Attorney Mentoring Program (1)
Skiing Gear (1)
Data Breach Settlement (1)
attorney-client privilege (2)
LLC Law (2)
Business Law (6)
Real Estate Law Firm (3)
Colorado Retail Leasing (1)
Mergers & Acquisitions (5)
News and Updates (17)
Spanish Speaking Lawyers Committee (3)
Alternative Dispute Resolution (6)
Denver arbitration (1)
ABA Article (1)
Non-Solicitiation (1)
Colorado Courts (2)
Community (33)
Landlords (1)
Overtime Wages (2)