Bank of America to buy UK cybersecurity firm MDSec, adding 65 experts

Bank of America said on Thursday it will acquire MDSec Consulting Limited, a UK-based information security consultancy. The deal adds roughly 65 cybersecurity professionals to the bank's operations. Financial terms were not disclosed.

MDSec, based in Macclesfield, England, provides technical information security consulting services. Charlotte, North Carolina-based Bank of America already runs a cyber threat operations center in nearby Chester, where it employs more than 1,400 people.

The acquisition deepens the bank's presence in northern England and expands its in-house security capabilities. It is expected to close in the fourth quarter of 2026, subject to regulatory approvals.

"We have long admired the exceptional ability of the MDSec team," said Bank of America chief information security officer Kris Fador. MDSec co-founder Dominic Chell said the deal offers a chance to "take that ambition to the next level" on security and technical innovation.

Major banks are increasingly bringing specialist cybersecurity talent in-house rather than relying solely on outside vendors, folding technical consultancies directly into their defense operations.