Bank of America to buy UK's MDSec Consulting to bolster cyber defenses

• MDSec is headquartered in Macclesfield, England and employs approximately 65 cybersecurity professionals providing security consultancy services
• Bank of America already has over 1,400 employees in Chester, England, where one of its cyber threat operations centers is located
• The acquisition addresses the growing challenge of AI-driven cyberattacks and ransomware that steal sensitive data and disrupt operations globally

Bank of America to Acquire UK Cybersecurity Firm MDSec Consulting

Bank of America announced plans to acquire MDSec Consulting Ltd, a UK-based information security firm, to strengthen its cyber defense capabilities. The transaction is expected to close in the fourth quarter of 2026, pending regulatory approval. Financial terms were not disclosed.

Key Details:

MDSec, headquartered in Macclesfield, England, employs approximately 65 cybersecurity professionals who provide security-related consultancy services. The acquisition aligns with the bank's existing UK operations, particularly its presence in North England with over 1,400 employees based in Chester, where one of the bank's cyber threat operations centers is located.

Market Context:

The deal comes as companies globally face an escalating threat landscape characterized by AI-driven cyberattacks and ransomware targeting sensitive data and operational systems. Bank of America, the second-largest U.S. lender, is proactively addressing these challenges through strategic expansion of its cybersecurity expertise.

Broader Industry Trend:

The acquisition reflects growing recognition among financial institutions of the critical need for enhanced cybersecurity infrastructure. This announcement follows recent White House initiatives, including the launch of a coordination group connecting AI developers with critical infrastructure operators to combat cyber threats.

Implications:

For Bank of America, this acquisition represents a strategic investment in protecting its digital assets and customer data while expanding its cybersecurity talent pool. The move signals the banking sector's increasing prioritization of cyber defense capabilities as a core business function, particularly as threats become more sophisticated through artificial intelligence integration.