Bank of America BAC has been seeking to sharpen its cybersecurity capabilities, as evident from its planned acquisition of U.K.-based information-security specialist MDSec Consulting Limited. The deal, expected to close in the fourth quarter of 2026 and subject to regulatory approvals, will bring roughly 65 highly skilled cybersecurity professionals into BAC’s technology and security organization.
While the financial terms of the deal have not been disclosed yet, the transaction could add modest personnel and integration costs as MDSec’s specialists become part of Bank of America’s broader technology and cybersecurity organization. This fits within the bank’s much larger ongoing technology-investment program, which included $13 billion of technology spending in 2025.
As banking becomes increasingly digital and AI adoption accelerates, financial institutions face more sophisticated cyber threats, including automated attacks and faster exploitation of vulnerabilities. MDSec’s technical expertise will likely complement BAC’s existing security infrastructure and help the bank strengthen vulnerability assessment, threat detection and security engineering capabilities.
Cybersecurity M&A activity is rising, with AI security emerging as a particularly important area of dealmaking. This suggests that specialized cybersecurity talent and expertise are becoming strategic assets rather than outsourced technology services.
For BAC, the acquisition reinforces management’s commitment to technology, digital banking and operational resilience. Over the longer term, stronger cybersecurity could help protect the bank’s franchise and support continued digital growth as cyber risks become an increasingly important cost and competitive consideration across the banking industry.
Steps Taken by BAC’s Peers in Cybersecurity
JPMorganJPM has been expanding its AI and cybersecurity teams at its Seattle technology center, while building infrastructure designed to run AI securely across its data centers and external providers. JPMorgan invests more than $18 billion annually in technology, including maintaining strong security and AI-ready cyber capabilities.
Likewise, Morgan Stanley MS is strengthening cybersecurity as it expands AI adoption. Morgan Stanley is working with Mythos Preview to improve its cybersecurity infrastructure, highlighting the need to address security risks associated with frontier AI models. Morgan Stanley has also emphasized that generative AI is increasing both the sophistication and speed of cyber threats, while AI-enabled defenses can improve threat detection and response.
