Deal confidentiality programmes concentrate on the data room, watermarked documents, access logs, staged disclosure. Meanwhile the same deal is discussed aloud, daily, for months, by a floating population of principals, bankers, lawyers and consultants across two companies, five advisory firms and a dozen meeting rooms. Adversaries attack the conversation, not the archive.
Why deals leak
A live transaction multiplies every dimension of exposure simultaneously. The population of insiders grows weekly and spans organisations with different security cultures and different loyalties. The venues multiply, counterparty offices, advisers' conference floors, hotels, restaurants, cars between meetings. The information's value peaks: to rival bidders, to traders, to the counterparty itself, knowledge of your position is worth basis points on billions. And the timeline is known: an adversary does not need durable access, only coverage of a few decisive weeks.
The leaks that kill deals are rarely dramatic. A valuation range mentioned in a hotel bar. An IC dissent overheard by the wrong assistant. A war room that a rival's consultant once helped fit out. In our casework, technical surveillance and human indiscretion appear in roughly equal measure, and each amplifies the other.
A confidentiality framework for the deal lifecycle
Disciplined acquirers treat confidentiality as a workstream with an owner, usually within the GC's office. At initiation, that means a named deal-security lead, compartmentalised code-word protocols and a defined map of where the deal may be discussed. During execution, it means inspected and controlled rooms for IC meetings and negotiations, pre-occupancy checks of hotel and counterparty venues, and explicit rules for cars, aircraft and after-hours discussion. At the sensitive end-game, pricing, board approval, signing, it means treating the final fortnight the way a listed company treats results week: minimum attendance, maximum assurance, no exceptions for seniority.
When signs of compromise appear mid-deal, a rival matching terms too precisely, media enquiries with impossible detail, the response has to run alongside the transaction without destabilising it. That is a specialised exercise: our espionage response practice has isolated live leaks inside competitive processes without the process itself ever becoming aware.
The return on discipline
Deal security is one of the few security investments with a direct line to value: leaked processes attract interlopers, move prices and collapse exclusivity. The cost of a disciplined confidentiality workstream across a six-month transaction is trivial against a single turn of a bid multiple. The acquirers who do this well regard it not as insurance but as negotiating hygiene, the precondition for every tactic they intend to use at the table.