Funding/M&A Bank of America to Acquire Cybersecurity Firm MDSec The acquisition will add approximately 65 cybersecurity professionals to Bank of America’s operations in the United Kingdom. By SecurityWeek News | July 30, 2026 (5:02 PM ET) Flipboard Reddit Whatsapp Whatsapp Email Bank of America announced on Thursday that it plans to acquire UK-based information security consultancy MDSec Consulting Limited. The transaction is expected to close during the fourth quarter of 2026, subject to regulatory approvals. Financial terms were not disclosed. Headquartered in Macclesfield, England, MDSec provides technical information security consulting services and employs approximately 65 cybersecurity professionals. The acquisition will expand Charlotte, North Carolina-based Bank of America’s existing presence in northern England. The financial institution has more than 1,400 employees in nearby Chester, where it also operates a cyber threat operations center. “We have long admired the exceptional ability of the MDSec team and are delighted that Bank of America and its clients will now further benefit from their work,” said Bank of America chief information security officer Kris Fador. MDSec co-founder Dominic Chell said joining Bank of America would allow the company to further its efforts to develop security capabilities and advance technical innovation. Advertisement. Scroll to continue reading. “Joining one of the world’s leading financial institutions, one that reflects our culture of innovation and technical excellence, gives us an incredible opportunity to take that ambition to the next level,” Chell said. Written By SecurityWeek News Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from SecurityWeek News In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws AegisAI Raises $36 Million for AI-Powered Email Security Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Friday Abstract Raises $25 Million to Expand Composable Security Operations Platform Assaf Keren Appointed New CISO of Meta Palo Alto Networks to Acquire Observability Platform Provider Embrace Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity Latest News Okta to Acquire Identity Threat Detection Firm Permiso Timeless Compliance: Why Better Questions Beat Bigger Frameworks DataBahn Raises $40 Million for Agentic Data Pipeline Management Discern Security Raises $13 Million in Series A Funding Cantina Emerges From Stealth With $8 Million in Funding Onyx Security Raises $113 Million to Control AI Agents in the Enterprise ‘DangleGeddon’: AI Could Weaponize Forgotten DNS Records at Global Scale Semiconductor Firm Analog Devices Discloses Data Breach Trending Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Webinar: Rethinking Cyber Defense for AI-Speed Attacks August 18, 2026 Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default. Register Virtual Event: CodeSecCon 2026 August 19, 2026 CodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps! Register People on the Move Alex Levinson has been named Executive Director at the National Collegiate Cyber Defense Competition. Hack The Box has appointed Konstantinos Dolkas as CTO and has promoted Christine Bartlett to CMO. The Department of Energy has appointed Andrew McClure as Director of the Office of Cybersecurity, Energy Security, and Emergency Response (CESER). More People On The Move Expert Insights Timeless Compliance: Why Better Questions Beat Bigger Frameworks The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change. (Matt Honea) Is Patching Dead? Vulnerability Management in the Post-Mythos Era You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win. (Danelle Au) When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge. (Torsten George) Legacy Systems, Real-World Impacts: The Reality of OT Security Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most challenging balancing acts. (Tod Beardsley) The Shift Toward Business-Aligned Risk Management Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences. (Steve Durbin) Flipboard Reddit Whatsapp Whatsapp Email