A recent FTI Consulting report says that cyber-attacks occur frequently following the closing of an M&A transaction, and that most companies aren’t adequately prepared to prevent those attacks. Here are some of the report’s rather alarming takeaways:
Impact on Deal Value and Post-Transaction Targets: More than two-thirds of those who experienced a cyber incident during or after a transaction claim it had a negative impact on the transaction in some capacity. Nearly half claimed the deal value was reduced as a result of the cyber incident, and another 20% stated that the transaction was paused or delayed. A majority (58%) believe the incident impaired the company’s ability to reach financial targets after the transaction.
Minimized Role for CISOs in Decision Making: A plurality of CISOs do not have a seat at the table during transaction due diligence, with one in three indicating they do not believe they have the ability to kill a transaction if the risk to the organization is too high during or after a transaction.
Disconnect between Growth Goals & Cybersecurity Risk: Pressure to close deals quickly comes at the expense of carefully weighing cybersecurity defenses (or lack thereof) during the due diligence process, exacerbating the somewhat inherent tension between growth and risk mitigation.
Cyber Integration Post Transaction is a Significant Challenge: Most organizations struggle to align and integrate their cybersecurity protocols and procedures post-deal, with 84% of survey respondents citing challenges in harmonizing IT systems and policies.
Companies are Targeted and Potentially Exposed at a Critical Moment: One in four respondents admit that their organization experienced a cyber incident within 24 months after closing a transaction, revealing lasting, real-world consequences for those who do not coordinate their cybersecurity and deal teams.
FTI says that one striking observation is the extent to which companies drop their guard post-closing. The report notes that during a transaction, 50% of executives say they take a fully proactive approach to cybersecurity risks. Post-closing, however, only 23% of executives saying they manage cybersecurity risks proactively.
Investors in portfolio companies that are attractive IPO candidates often pursue a “dual track” exit strategy that involves preparing for initial public offering while also soliciting potential buyers for the company. Done properly, this dual track process can help investors maximize the valuation of their investment by allowing them to choose the path that looks most attractive as conditions evolve.
If you’re working with a company that’s thinking about a dual track exit strategy, be sure to check out this Cooley blog, which discusses some of the things that companies and their advisors should consider before going down this path. This excerpt discusses how to determine which track is most likely to result in the highest valuation:
The valuation of a business by public markets versus a financial or strategic buyer can vary significantly. IPOs are affected by stock market sentiment, volatility and comparisons (whether valid or not) with the recent trading performance of peers. When equity markets are strong, the IPO track can act as a “stalking horse” in eliciting M&A buyers. Valuation in an M&A process, on the other hand, is often driven by considerations such as realizing synergies, pursuing short- versus long-term business plans, obtaining critical assets (often intellectual property), and benchmarking off of industry consolidation trends and recent comparable transactions.
The factors that shape the ultimate choice include:
Valuation dynamics: Does the M&A market fairly value long-term potential? Is an acquirer offering a premium that reflects its strategic rationale?
Execution risk: Are there concerns around market conditions or investor appetite? Is an M&A transaction actually actionable?
Strategic vision: Does the company prefer independence or believe it can achieve greater impact as part of a larger organization?
What makes a dual-track truly effective is leverage. The question is whether a credible IPO story can be maintained in parallel to creating heat in the auction and how speed through diligence, deal terms and consideration can be leveraged in the most effective manner.
Something to remember: Testing the waters remains essential. With a private sale, it will never be possible to know with certainty how the stock market would have valued a business for comparison. However, pre-IPO companies can and should take the opportunity to assess market receptivity by taking advantage of confidential meetings with investors – dubbed “testing-the-waters” meetings in the US – that carefully comply with applicable regulations. These meetings provide valuable intelligence about where public market investors are likely to price your company and thereby indirectly inform how aggressively you should be pushing M&A buyers on valuation.
Other considerations addressed by the blog include the need for stakeholder buy-in, the company’s viability as an IPO candidate, whether investors desire a complete exit, the time frames involved in a dual track process, and the ability of the team to execute two processes at once.
Faegre Drinker’s Oderah Nwaeze and Angela Lam recently put together this handy overview of Delaware’s fiduciary duty of disclosure. The article reviews what the duty of disclosure requires, the settings in which disclosure claims are typically brought, and offers some guidance to boards on how to satisfy their duty of disclosure. This excerpt discusses one area where disclosure claims frequently arise – management projections:
– Delaware law does not require disclosure of all financial projections, especially if they are speculative, unreliable, or not relied upon by the financial advisor.
– But financial projections made in the ordinary course of business and used by financial advisors are typically considered reliable and should be disclosed if relied upon.
– The failure to disclose financial projections may be considered a material omission depending on the specifics.
– And selective disclosure of only some projections can be misleading, causing courts to find that the partial disclosure was inadequate if omitted information would be material to a reasonable stockholder.
Other sources of disclosure claims identified by the authors include financial advisor compensation and conflicts, descriptions of the merger sale process, and director nominations and removal.
Last week, in Paramount Global v. Rhode Island Office of the Treasurer, (Del.; 3/26), a divided Delaware Supreme Court affirmed a prior Chancery Court ruling holding that, under appropriate circumstances, a stockholder could establish a credible basis for suspected wrongdoing based on post-demand evidence and anonymous sources. This excerpt from Gibson Dunn’s memo on the case summarizes the Court’s decision:
Post-Demand Evidence: The Delaware Supreme Court held “under exceptional circumstances, the Court of Chancery may, in the exercise of its sound discretion, consider post-demand evidence that is material to the court’s credible-basis inquiry and not prejudicial to the corporation.” The Court reasoned that there is nothing in Section 220’s text that prohibits the consideration of post-demand evidence. However, the Court endorsed the general rule “that when a stockholder seeks relief under § 220, it will be limited to evidence identified in the demand and the information available to the stockholder when the demand was made.”
Hearsay in Confidentially Sourced News Reports: The Court affirmed that hearsay from anonymous sources in news articles, if found to be sufficiently reliable, can support a credible basis. The Court expressed unease with the Vice Chancellor’s suggestion that “[n]ews articles from reputable publications that rely on anonymous sources will generally be sufficiently reliable for a court to consider when assessing whether a stockholder has a credible basis to suspect wrongdoing,” but was satisfied that the Vice Chancellor did not rely exclusively on the news outlets’ reputations in reaching his conclusion. The Court noted that an inquiry into the reliability of hearsay evidence is “fact-specific” and concluded that the Vice Chancellor’s reliability determination fell “within the permissible range of choices available in this case.”
Chief Justice Seitz and Justice Valihura dissented from the Court’s decision to permit consideration of post-demand evidence. The dissenters noted that “confining stockholders to evidence in existence at the time of the demand discourages stockholders from filing Section 220 litigation lacking a concrete basis at the time of the demand” and incentivizes them “to bring books and records disputes only after the dispute has matured into a concrete dispute or transaction.”
There’s an interesting new letter opinion from Magistrate in Chancery Hume that addresses when optimistic statements by a buyer about its future plans for the target’s business that fail to materialize cross the line and become actionable fraud. Shareholder Representative Services v. Sphera Solutions, (Del. Ch.; 3/26), arose out of the 2024 sale of SupplyShift, a provider of supply chain sustainability and responsible sourcing solutions, to Sphera Solutions.
In the negotiations leading up to the transaction, Sphera Solutions made a number of statements concerning its future plans for the target company. The plaintiff contended that these optimistic statements played a central role in the target’s decision to sell the company and its willingness to agree to an earnout. Magistrate Hume’s opinion identifies four specific statements cited by the plaintiff in support of its fraud and breach of contract claims:
(1) Sphera’s CEO stated that Sphera would market SupplyShift product offerings to “all [its] 7,000 . . . customers.”
(2) Sphera’s Head of Corporate Development stated that Sphera would both substantially increase SupplyShift’s marketing budget and focus on cross selling efforts of SupplyShift products to Sphera customers.
(3) Sphera’s Head of Corporate Development represented that Sphera already had a “substantial integration plan” that would it implement immediately post closing.
(4) Sphera’s Head of Corporate Development articulated to SupplyShift’s CEO that successfully cross-selling Sphera’s lowest price offering to only 7.5% of Sphera’s extant customer base would increase ARR to more than $10 million. Moreover, successfully cross-selling SupplyShift’s average price offering to only 3% of Sphera’s customers would increase ARR by more than $13 million. The ARR benchmark for a full earn-out payment was only $8.5 million.
Sphera responded to the plaintiff’s claims by contending that certain of the cited statements were “mere puffery” and did not rise to the level of fraud. It pointed to the Chancery Court’s statements in Trifecta Multimedia Hldgs. Inc. v. WCG Clinical Servs., (Del. Ch.; 6/24), to the effect that a party’s “optimistic statements praising its own ‘skills, experience, and resources’ are ‘mere puffery and cannot form the basis for a fraud claim” and that “vague statements of corporate optimism” are similarly insufficient to support such a claim.
Citing the Chancery Court’s decision in Trenwick America Litigation Trust v. Ernst & Young, (Del. Ch.; 8/06), Magistrate Hume said that a forward-looking statement goes beyond mere puffery where it is both “sufficiently specific” and “fraudulently conceived,” and that a plaintiff’s fraud claims will survive the pleading stage if “the plaintiff sets forth particularized facts about (1) the circumstances of the promise, (2) inferences that the promise was and (3) defendant’s incentive to mislead.”
Applying this standard, Magistrate Hume held that several of Sphera’s statements were simply puffery, including its representation that it would market SupplyShift’s products to all 7,000 of its customers. However, he held that Sphera’s statements about increasing its marketing budget and focus on cross-selling efforts were a different matter:
But Sphera’s promise to substantially increase its marketing budget and dedicate resources to cross-selling departs mere puffery’s safe harbor into more treacherous waters. While this statement taken by itself could be puffery, SRS’s pleading meets the standard this Court set forth in Trenwick.
According to the language of the complaint, when Sphera’s Head of Corporate Development made this statement, Sphera had already finalized its budget for the following year that failed to devote adequate resources to support its promise to SupplyShift. Moreover, Sphera had every incentive to mislead SRS. The complaint alleges that Sphera induced SupplyShift to enter the arrangement where a significant portion of the purchase price was deferred to the true-up and earn-out stages based on Sphera’s representation.
While the merger agreement for the transaction did include an integration clause, Magistrate Hume concluded that this clause did not include clear non-reliance reliance language, and that as a result, the plaintiff’s fraud claims were not precluded. Accordingly, he declined to dismiss those claims at the pleading stage.
Morris Nichols recently posted the 2026 edition of its “Mergers & Acquisitions: A Delaware Checklist,” which may be downloaded for free at the firm’s website. The 192-page Checklist summarizes essential Delaware decisions addressing fiduciary duties, poison pills, deal protections and other merger agreement provisions, structural issues, appraisal rights and preferred stock and negotiated acquisitions.
EY Parthenon recently issued its monthly report on M&A activity for February 2026. One of the trends noted in the report is the increase in PE sponsor-backed take private deals. Here’s an excerpt:
PE acquisitions increased 9% in February from the prior month, including a continued focus on select public-to-private transactions. Recent take-private activity highlights how financial sponsors are pursuing public companies that exhibit strong underlying assets while facing structural constraints in executing long-term strategic plans within public markets.
By transitioning these businesses to private ownership, PE sponsors can pursue accelerated operational improvements and cost efficiency while selectively repositioning operating platforms toward higher-growth adjacencies or more efficient commercial models. This pattern reflects a renewed conviction in PE’s ability to capture multiyear value-creation opportunities through focused governance and faster decision-making cycles.
Overall deal activity in February showed deal value rising by 139% and volume declining by 15%. EY says this reflects a continuing emphasis on larger transactions. Transactions of $100 million and above are up 224% in value and down 9% in volume on a year-over-year basis, while $1 billion and above deals surged 319% in value and rose 38% in volume.
Alvarez & Marsal recently published the latest edition of its US Activist Alert, which highlights three market trends driving M&A-related activism. These trends are increasing M&A activity driven in part by rising foreign direct investment, an emphasis on portfolio optimization, and an enhanced focus on margin improvement and cost discipline.
The article highlights Elliott Management’s recent campaigns at Honeywell and Pepsico as examples of activists’ focus on portfolio optimization, and sets forth the following considerations for boards and management’s at companies that may be vulnerable to this type of activist campaign theme:
Clear and compelling total equity story: Companies must articulate how each business unit, segment, or product line contributes to strategic coherence and capital efficiency. Not all segments warrant standalone status, and in many cases, assets are stronger together. Management teams and boards that effectively articulate this to the market can build investor conviction in the company’s portfolio and longterm value creation narrative.
Continuous business simplification: Investors are evaluating whether structural complexity, at the segment or even SKU level, obscures value or dilutes management focus. While activists may at times “overshoot” by ignoring or failing to recognize real synergies, companies should proactively assess and explain the rationale for their structures to stay ahead of external pressure.
Disciplined product and segment rationalization: Defenses rooted in legacy synergies or historical strategic fit face heightened skepticism. Arguments for retaining certain assets or segments must be grounded in demonstrable strategic or operational advantages. Otherwise, such arguments may be interpreted as resistance to necessary portfolio discipline rather than evidence of structural advantage.
A&M goes on to say that activists are willing to challenge complexity in a companies’ portfolio of businesses without waiting for underperformance. Instead, they highlight “blurred strategic priorities” and capital misallocation. In this environment, companies need to simplify their business portfolios where appropriate in order to avoid having their strategic narrative coopted by an activist bent on “portfolio optimization” or – as we geriatrics used to call it – a bust-up.
On Wednesday, the FTC and DOJ announced the launch of a public inquiry into the effectiveness of the updated HSR form that was in place for a year until a Fifth Circuit ruling last week. The announcement explains:
The Commission continues to believe that the prior, nearly 50-year-old form is insufficient to review modern mergers and acquisitions. Regardless of the outcome of the litigation challenging the Updated Form, the FTC is considering engaging in a new rulemaking process.
Through the joint request for information, the FTC and DOJ seek to understand whether the requirements of the Updated Form effectively fulfill their intended purpose to:
– Enable the Agencies to identify potentially anticompetitive mergers more efficiently; and
– Allow the Agencies to more quickly determine whether a deal would require the issuance of Second Requests to conduct an in-depth antitrust investigation.
Under the HSR Act, parties to certain mergers and acquisitions are required to submit premerger notification forms that disclose certain information about their proposed deal and business operations. The Agencies use this information to conduct a premerger assessment in the short time allowed under the HSR Act, typically 30 days.
In the joint request for information, the Agencies want to ensure that the requirements of the Updated Form do not impose burdens on filers that outweigh the usefulness of the information provided to the FTC and DOJ. As elaborated in more detail in the RFI, the Agencies are also evaluating whether additional modifications to the Updated Form may be warranted to address developments affecting the HSR review process that have emerged over the past year.
Comments must be received by May 26 and can be submitted at Regulations.gov.
Earlier this month, in Fortis Advisors LLC v. Krafton, Inc. (Del. Ch.; 3/26), the Chancery Court decided to extend an earnout period after finding that acquiror, Krafton, breached an equity purchase agreement by improperly seizing operational control of the target, Unknown Worlds Entertainment, after terminating key employees without valid “cause,” allegedly to avoid earnout payments. This Troutman Pepper alert gives some background:
[G]aming conglomerate Krafton, Inc. acquired Unknown Worlds Entertainment […] in October 2021 for $500 million upfront plus up to $250 million in contingent earnout payments tied to revenue performance through a defined testing period ending December 31, 2025. The equity purchase agreement (EPA) guaranteed that three “key employees,” co-founders […] would retain operational control of the studio during the earnout period and could only be terminated “for cause.” The EPA defined “cause” narrowly […] By spring 2025, as Subnautica 2 neared its planned early access launch, Krafton’s internal financial projections showed that a successful release would generate between $191.8 million and $242.2 million in earnout payments.
Krafton’s CEO, who had personally led the acquisition, became concerned that the payout would damage his reputation and consulted an AI chatbot for strategies to avoid the obligation. Krafton formed an internal task force, internally called Project X, to either negotiate a reduction of the earnout or execute a corporate takeover of the studio.
Krafton terminated all three key employees, citing a single reason: their “intention to proceed with a premature release of Subnautica 2.” Krafton then locked the studio out of its Steam publishing platform, blocked the game’s release, and replaced the key employees with Krafton representatives.
The court found that the terminations failed to meet the limited “cause” definition negotiated and memorialized in the purchase agreement, and that Krafton’s attempt to pivot justifications for the terminations during litigation was impermissible. It also disagreed that the founders’ decision to download company data to their personal devices breached the agreement, as the purchase agreement permitted the use of confidential information to monitor their rights.
But the remedies are what’s most notable here:
The court enforced the EPA’s express provision that irreparable harm would result from any breach and that the nonbreaching party was entitled to specific performance, and ordered the following:
– The court ordered the reinstatement of Gill as CEO of Unknown Worlds with full operational authority, effective immediately. The court declined to reinstate Cleveland and McGuire, finding that restoring Gill alone was sufficient to vindicate the sellers’ operational control rights under the EPA [. . .]
– The July 1, 2025, board resolution through which Krafton seized control of the studio was declared ineffective to the extent it infringed on Gill’s operational control right.
– The court equitably extended the earnout testing period by 258 days, the duration of Gill’s wrongful ouster, moving the base deadline from December 31, 2025, to September 15, 2026, with Fortis retaining its contractual right to further extend the period to March 15, 2027.
The alert shares a number of important takeaways from this case — including that the Chancery Court may order an equitable (and exact) extension of the earnout if there’s wrongful interference by the acquiror. It also points out that:
The acquiror’s use of an AI chatbot to develop strategies for avoiding the earnout, and the subsequent deletion of those logs-featured prominently in the court’s factual findings. Parties should treat AI-generated content as they would any other business communication: subject to discovery, preservation obligations, and potential adverse inference.
I love this case, not just because of the AI chatbot consultation, but because I have a lot of experience with Subnautica. I can’t say that about many games, but my husband is a big fan of all types of games. Since he buys very few video games and has a slight obsession with submarines, I’ve sat on the couch with Subnautica in the background many a time. It’s not my favorite background track — I find the music stressful. But submarines are probably the most common theme of the movies and video games playing in the background in our house. A few weeks ago, a neighbor texted me that my daughter said to her kids, “Thank goodness you were home. My parents are cleaning the house and watching something called Das Boot.” Apparently, they prefer Subnautica.