Mandiant, a US cyber security company at the forefront of fighting a new wave of cyber attacks, has been bought for more than $1bn, in a deal that highlights the growing concern about government-backed online spying from China and the US National Security Agency.
In the largest US cyber security deal in recent years, FireEye, a New York-listed cyber threat detection company, has acquired Mandiant, the security technology company that last year accused the Chinese military of hacking more than 100 US companies.
David De Walt, chairman and chief executive of FireEye, said the revelations of the NSA mass surveillance programme and Mandiant’s report on Chinese hackers had “accelerated business opportunities” for the company.
“A lot of companies, organisations and governments said ‘look how pervasive these superpowers are in monitoring and stealing from these companies’,” he said. “There is an accelerating awareness that just wasn’t there a year ago.”
Mr DeWalt, who was chief executive of McAfee and sold the antivirus software maker to Intel in 2010, said FireEye and Mandiant were the forefront of a new generation of cyber security protection that would replace the older antivirus model.
FireEye could respond in “seconds or minutes” to the advanced threat posed by, for example, a “particularly nasty nation state attacker,” and then pass the issue – malware, for example – to Mandiant to “fix in real time”, he said.
The deal, for more than $900m in FireEye stock at Thursday’s price and $106.5m cash, is the largest cyber security deal for at least three years, according to Dealogic, the acquisitions research firm. The number of cyber security deals in the United States doubled in 2013, with 10 compared with five each year in 2012 and 2011.
Kevin Mandia, Mandiant’s founder and a former US military cyber crime investigator, said that when he started the firm in 2004, its message that security breaches were inevitable and companies had to work on eliminating the consequences “did not fly”.
With venture capital reluctant to invest in the idea, he funded the business himself. “Now it is absolutely generally accepted that you cannot solely rely on preventive services,” said Mr Mandia, who will become FireEye’s chief operating officer.
To speed up their response to threats, the companies profile hackers and try to predict the types of malware they will try to load on to a machine, much as detectives spot patterns in the behaviours of criminals.
“On the front line of the cyber battlefield you have to be able to say . . . it is these guys in St Petersburg who normally use these 18 pieces of malware,” Mr Mandia said. He added that, five years ago, when companies focused on antivirus programmes, it could take months to discover hackers had accessed a network.
Mandiant started as a security consultancy service but has since developed its own software to help protect against advanced persistent threats such as nation state attacks. More than 30 per cent of the Fortune 100 have used Mandiant’s services when their computers have been hacked.
The company generated more than $100m in sales in 2013, 95 per cent in North America and more than half from software sales. Mandiant raised money in 2011 from One Equity Partners, the private investment arm of JPMorgan Chase and Kleiner Perkins Caulfield & Byers, the Silicon Valley venture capital firm.
Shares in FireEye, which have risen 18 per cent since it listed in September 2013, jumped more than 22 per cent to $50.50 in after-hours trading on Thursday after the deal was announced.
