
LevelBlue to acquire Aon's cyber consulting teams in global deal
This transaction will see more than 300 technology professionals join LevelBlue, bolstering its cyber risk and incident response capabilities on a global scale. These teams currently provide services to Fortune 500 companies, 80% of the Am Law 100, and most of the top 20 UK law firms. The acquisition positions LevelBlue as the largest independent pure play Managed Security Services Provider (MSSP) worldwide.
Consulting capabilities
The addition of Aon's Cybersecurity and IP Litigation consulting groups brings specialised expertise in cybersecurity risk management and technology-related intellectual property litigation to LevelBlue's existing operations. These capabilities will now complement LevelBlue's 24/7 managed detection and response services, creating a broader offering that spans pre-emptive protection, digital risk management, and comprehensive incident response. "Cyber resilience is crucial for organisations of all sizes," said Robert McCullen, Chairman and Chief Executive Officer of LevelBlue. "By combining LevelBlue's exceptional cloud-based, AI-driven managed detection and response platform with Stroz Friedberg's proactive cyber consulting and advanced digital forensic and incident response capabilities, we're introducing the industry's most comprehensive unified cybersecurity services platform. This platform will not only strengthen clients' defenses preemptively, but also empower them with deeper insights and faster incident resolution. Together, we're helping organisations stay ahead of emerging threats and recover with greater speed and confidence."
David Yaches, Chief Executive Officer of Cyber Solutions Security Consulting at Aon, commented on the agreement: "We are thrilled to join forces with LevelBlue. Our teams are aligned in mission and values, and this acquisition will allow us to serve clients with an expanded suite of cyber solutions and deeper technical expertise."
Maintaining core services
Aon will continue to provide cyber brokerage services via its Cyber Solutions group, CyQu platform, and Cyber Risk Analyzer, focusing on serving a wide range of client risk and broking needs globally. The company's Cybersecurity consulting segment has been recognised in the 2024 Forrester Wave for Cybersecurity Incident Response Services, particularly for its coverage of adversary simulation, penetration testing, incident response planning, breach response, and digital forensics. "The incredible cybersecurity readiness and response capabilities of Aon's Cybersecurity consulting group, including the esteemed heritage of the Stroz Friedberg legacy, brings highly valued expertise to LevelBlue," said Mike Troiano, LevelBlue Board Member and Head of AT&T Business Products. "We expect this acquisition to significantly enhance the strategic cybersecurity services delivered globally by LevelBlue to AT&T's government and enterprise customers."
LevelBlue and Aon will also establish a strategic collaboration as part of the agreement, allowing both companies to offer combined and complementary services to their respective clients. This partnership is intended to provide holistic cybersecurity support, integrating managed services and consulting expertise to address the evolving cyber threat landscape.
Christian Hoffman, Global Specialty and Financial Products Leader at Aon, added: "Cyber remains a top risk category for our clients. Aon will continue to deliver leading cyber brokerage capabilities through our Cyber Solutions group, CyQu platform and Cyber Risk Analyzer to serve our clients growing cyber broking needs."
The consulting teams from Aon are known for assisting clients with strengthening their operational readiness, protecting digital assets, and reducing the impact of cyber incidents, using a mix of technical know-how and established methodologies. Their track record has made them a choice partner for organisations looking to accelerate recovery in the event of a cyber event.
Market perspective
Christina Richmond, Principal Analyst at Richmond Advisory Group, shared her view on the acquisition: "This is a highly strategic acquisition for the cybersecurity services market. LevelBlue will strengthen its position at the intersection of managed security and cyber consulting services. By acquiring leading cybersecurity and IP litigation consulting capabilities, the combined organisation is now better positioned to proactively enhance organisational resilience. The strategic relationship with Aon bolsters LevelBlue's posture with cyber insurers and adds highly complementary risk analysis and advisory services."
Santander is acting as financial advisor and Kirkland & Ellis as legal advisor to LevelBlue, while Lazard and Latham & Watkins are advising Aon for this transaction. Financial terms have not been disclosed, and the deal remains subject to standard closing conditions.
Hashtags

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles


Techday NZ
04-07-2025
- Techday NZ
LevelBlue acquires Trustwave to form largest global MSSP
LevelBlue has entered into an agreement to acquire Trustwave, expanding its capabilities in managed security services and managed detection and response. The acquisition of Trustwave from MC2 Security Fund is expected to create the world's largest independent, pure-play managed security services provider. This move closely follows LevelBlue's recent agreement to purchase Aon's cybersecurity consulting business, further consolidating its position in the cyber defence sector. Expanded capabilities Trustwave's Fusion Platform and cloud-native MDR service will be integrated into LevelBlue's offering. The merger aims to deliver 24/7 cybersecurity protection across global markets, enhancing visibility and control over security operations for organisations of varying scales. The combined portfolio is anticipated to create a strategically unified managed defence platform. It will leverage LevelBlue's artificial intelligence-driven threat detection capabilities and Trustwave's SpiderLabs unit for threat research and intelligence. The joint offering targets organisations operating across cloud, hybrid, and on-premises environments. Trustwave recently achieved full authorised status from the US Federal Risk and Authorization Management Program (FedRAMP) and StateRAMP, which will enable LevelBlue to meet requirements for US federal and state projects, including those with stringent security demands such as the Department of Defense and Cybersecurity Maturity Model Certification (CMMC). "The acquisition of Trustwave represents a pivotal moment for LevelBlue and the cybersecurity industry," said Robert McCullen, Chairman and CEO of LevelBlue. "Trustwave's extensive expertise in managed detection and response services, combined with its unparalleled threat intelligence from SpiderLabs and mission-critical FedRAMP and StateRAMP authorizations, perfectly aligns with our vision to deliver simplified and powerful cybersecurity protection to organisations. This strategic move reflects our commitment to delivering better cybersecurity outcomes to our customers and enhances our global go-to-market capabilities, as well as in the U.S. federal, state, and local government markets." Eric Harmon, Chief Executive Officer of Trustwave, said, "We're thrilled to partner with LevelBlue to drive our next phase of growth and unlock even greater cyber value for our clients. The threat landscape continues to evolve at an increasingly rapid pace. This announcement reinforces Trustwave's market leadership, and together with LevelBlue, positions us to further strengthen our combined leadership position, bolster our offensive and defensive security portfolio, and drive additional innovation to further safeguard and fortify our clients against disruptive and damaging cyber threats." Market response Trustwave, headquartered in Chicago and operating globally, employs over 1,000 security professionals. It is recognised as an industry leader in managed detection and response, managed security services, cybersecurity advisory, penetration testing, database, and email security. Its SpiderLabs team contributes threat research and intelligence, integrated into its product and service suite. Market analysts noted the significance of the deal, particularly in light of recent consolidations in the managed security sector. Christina Richmond, Principal Analyst at Richmond Advisory Group, stated, "Two longtime leaders in MSS and MDR coming together signals market maturation and industry consolidation, but also a powerhouse opportunity. Trustwave's SpiderLabs team and Fusion platform integrated with LevelBlue's threat intelligence and machine learning capabilities, backed by the Open Threat Exchange (OTX), will enhance threat detection and response on a cloud-based platform. Add in the recently announced acquisition of Aon's Cybersecurity and Intellectual Property Litigation consulting groups, and the potential for a full-service global cybersecurity and risk management firm is apparent." Strategic impact The acquisition fits into LevelBlue's broader approach of merging complementary organisations to build a stronger, more integrated offering for clients, specifically addressing increased demand for comprehensive managed cybersecurity solutions. Bringing together the two companies will position LevelBlue as the largest independent, pure-play MSSP globally. Chad Sweet, Chairman of Trustwave and Co-Founder of The Chertoff Group / MC2, expressed support for the acquisition. "Joining forces with LevelBlue marks an exciting new chapter for Trustwave and our clients. The combination of LevelBlue's AI threat detection and Trustwave's FedRAMP and StateRAMP authorized Fusion Intelligent Security Operations Platform enables leading-edge cybersecurity protection for enterprises and government clients." Shawn Hakl, Head of AT&T Business Products, commented on the significance of the certification aspects. "FedRAMP and StateRAMP certified managed detection and response capabilities are an exciting expansion to LevelBlue's managed security services. This business combination positions LevelBlue as a strategic provider of cybersecurity services in AT&T's portfolio, especially to our valued federal customers." Financial advice for LevelBlue was provided by Santander, with legal counsel from Kirkland & Ellis. Trustwave's advisors included Guggenheim Securities and Pillsbury Winthrop Shaw Pittman. Strategic advice will be provided by The Chertoff Group to help accelerate growth in the managed detection and response market segment. The financial terms of the deal were not disclosed, and the acquisition remains subject to customary closing conditions.


Techday NZ
12-06-2025
- Techday NZ
LevelBlue to acquire Aon's cyber consulting teams in global deal
LevelBlue has reached a definitive agreement to acquire Aon's Cybersecurity and Intellectual Property Litigation consulting groups, including the well-established Stroz Friedberg and Elysium Digital teams. This transaction will see more than 300 technology professionals join LevelBlue, bolstering its cyber risk and incident response capabilities on a global scale. These teams currently provide services to Fortune 500 companies, 80% of the Am Law 100, and most of the top 20 UK law firms. The acquisition positions LevelBlue as the largest independent pure play Managed Security Services Provider (MSSP) worldwide. Consulting capabilities The addition of Aon's Cybersecurity and IP Litigation consulting groups brings specialised expertise in cybersecurity risk management and technology-related intellectual property litigation to LevelBlue's existing operations. These capabilities will now complement LevelBlue's 24/7 managed detection and response services, creating a broader offering that spans pre-emptive protection, digital risk management, and comprehensive incident response. "Cyber resilience is crucial for organisations of all sizes," said Robert McCullen, Chairman and Chief Executive Officer of LevelBlue. "By combining LevelBlue's exceptional cloud-based, AI-driven managed detection and response platform with Stroz Friedberg's proactive cyber consulting and advanced digital forensic and incident response capabilities, we're introducing the industry's most comprehensive unified cybersecurity services platform. This platform will not only strengthen clients' defenses preemptively, but also empower them with deeper insights and faster incident resolution. Together, we're helping organisations stay ahead of emerging threats and recover with greater speed and confidence." David Yaches, Chief Executive Officer of Cyber Solutions Security Consulting at Aon, commented on the agreement: "We are thrilled to join forces with LevelBlue. Our teams are aligned in mission and values, and this acquisition will allow us to serve clients with an expanded suite of cyber solutions and deeper technical expertise." Maintaining core services Aon will continue to provide cyber brokerage services via its Cyber Solutions group, CyQu platform, and Cyber Risk Analyzer, focusing on serving a wide range of client risk and broking needs globally. The company's Cybersecurity consulting segment has been recognised in the 2024 Forrester Wave for Cybersecurity Incident Response Services, particularly for its coverage of adversary simulation, penetration testing, incident response planning, breach response, and digital forensics. "The incredible cybersecurity readiness and response capabilities of Aon's Cybersecurity consulting group, including the esteemed heritage of the Stroz Friedberg legacy, brings highly valued expertise to LevelBlue," said Mike Troiano, LevelBlue Board Member and Head of AT&T Business Products. "We expect this acquisition to significantly enhance the strategic cybersecurity services delivered globally by LevelBlue to AT&T's government and enterprise customers." LevelBlue and Aon will also establish a strategic collaboration as part of the agreement, allowing both companies to offer combined and complementary services to their respective clients. This partnership is intended to provide holistic cybersecurity support, integrating managed services and consulting expertise to address the evolving cyber threat landscape. Christian Hoffman, Global Specialty and Financial Products Leader at Aon, added: "Cyber remains a top risk category for our clients. Aon will continue to deliver leading cyber brokerage capabilities through our Cyber Solutions group, CyQu platform and Cyber Risk Analyzer to serve our clients growing cyber broking needs." The consulting teams from Aon are known for assisting clients with strengthening their operational readiness, protecting digital assets, and reducing the impact of cyber incidents, using a mix of technical know-how and established methodologies. Their track record has made them a choice partner for organisations looking to accelerate recovery in the event of a cyber event. Market perspective Christina Richmond, Principal Analyst at Richmond Advisory Group, shared her view on the acquisition: "This is a highly strategic acquisition for the cybersecurity services market. LevelBlue will strengthen its position at the intersection of managed security and cyber consulting services. By acquiring leading cybersecurity and IP litigation consulting capabilities, the combined organisation is now better positioned to proactively enhance organisational resilience. The strategic relationship with Aon bolsters LevelBlue's posture with cyber insurers and adds highly complementary risk analysis and advisory services." Santander is acting as financial advisor and Kirkland & Ellis as legal advisor to LevelBlue, while Lazard and Latham & Watkins are advising Aon for this transaction. Financial terms have not been disclosed, and the deal remains subject to standard closing conditions.


Techday NZ
06-06-2025
- Techday NZ
Healthcare faces surge in cyberattacks & AI-driven threats
A new report by LevelBlue highlights increasing cybersecurity risks faced by healthcare organisations, including a significant rise in breaches and a lack of preparedness for AI-driven threats. The 2025 Spotlight Report: Cyber Resilience and Business Impact in Healthcare surveyed healthcare executives globally to assess how the industry is responding to ongoing and evolving cyber threats. According to the findings, 32% of healthcare executives stated that their organisation had suffered a security breach in the past 12 months. In addition, nearly half (46%) of respondents reported experiencing a significantly higher volume of cyberattacks compared to previous years. The report addressed emerging concerns over artificial intelligence, as only 29% of healthcare executives said they felt prepared for AI-powered cyber threats. Despite this, 41% believed their organisations would be targeted by such threats in the foreseeable future. Visibility into the software supply chain remains another weakness for many organisations. The survey found that 54% of healthcare executives said they have very low to moderate visibility into their software supply chain. Only 21% indicated that they are making significant investments in software supply chain security. LevelBlue's research also details shifts in the way healthcare organisations approach cybersecurity, underscoring a move towards integrating resilience measures across business operations. The report found that 61% of healthcare organisations now align their cybersecurity teams with lines of business, indicating that safeguarding digital assets is increasingly viewed as a shared departmental responsibility. There is also growing reliance on external expertise to respond to cyber threats. The report indicated that 44% of healthcare organisations expect to enlist managed security service providers over the next two years, compared to just 30% that have used such services in the past year. Budget allocations reflect this trend as well. The report showed that 59% of leadership roles are now measured against cybersecurity KPIs, and 43% of executives said they allocate cybersecurity budgets at the outset of new initiatives. This approach is designed to embed security considerations into the early stages of business innovation and development. Theresa Lanowitz, Chief Evangelist of LevelBlue, commented on the findings: "With the rising risk of AI-powered cyberattacks and vulnerabilities in the software supply chain, achieving cyber resilience in healthcare is more critical than ever. Our research shows that healthcare organisations are no longer viewing cybersecurity as just an IT issue; it's now a business priority. Still, there is work to be done to properly prepare and protect themselves." The report identified specific areas where healthcare organisations are focusing their investments to combat new and emerging threats. According to the surveyed executives, the greatest investment is being made in generative AI for social engineering attack detection (28%), followed by cyber-resilience processes across the business (26%), application security (25%), machine learning for pattern matching (24%), and Zero Trust Architecture (15%). LevelBlue's findings included recommendations for organisations aiming to strengthen their cyber resilience. These steps are to push cyber resilience up the organisational hierarchy, embed cybersecurity responsibilities throughout all teams, adopt a proactive - rather than reactive - approach to threats, and give particular priority to resilience in the software supply chain. The research for the Spotlight Report was conducted through a quantitative survey by FT Longitude in January 2025, involving 1,500 C-suite and senior executives across 14 countries and seven industries. The healthcare industry sample included 220 executives.