Cybersecurity · Industry brief

Indra Group has agreed to acquire a 30% stake in Madrid-based cybersecurity firm TRC through its technology subsidiary IndraMind, with an option to raise its stake to 100% over the next two years. TRC, entirely Spanish-owned, specializes in protecting systems and networks for strategic areas including critical infrastructure, defense, and borders, and closed 2025 with revenue above €120 million and over 400 employees. Indra, a technology and defence firm with 2025 revenue of €5.457 billion, aims to complement its cybersecurity offering and expand its portfolio in risk identification, operational services, and digital identity solutions. The deal is framed within Europe's push for strategic autonomy and technological sovereignty, with approval from Spain's competition authority (CNMC) still pending. (Source: Forbes.es via Dealroom)

On September 1, 2026, the DOJ announced a $2,042,518 False Claims Act settlement with Honeywell Aerospace Inc. resolving allegations that the company failed to comply with NIST SP 800-171 cybersecurity requirements for a Defense Department contract from April 2020 through December 2023. The case, United States ex rel. Rachel Tenney v. Honeywell International Inc. (W.D.N.C. 3:22-cv-129), originated from a qui tam whistleblower lawsuit filed by a former Honeywell employee and was coordinated by the DOJ Civil Division, the U.S. Attorney's Office for the Western District of North Carolina, and the Defense Criminal Investigative Service. This settlement represents the latest enforcement action under DOJ's Civil Cyber-Fraud Initiative, launched in October 2021, which uses the False Claims Act to pursue government contractors for deficient cybersecurity practices. In fiscal year 2025 alone, DOJ recovered $52 million across nine cyber-related FCA settlements, part of a $6.8 billion total in FCA recoveries. The case underscores that DOJ scrutiny extends beyond systemic failures to lapses affecting discrete systems and reinforces the role of insider whistleblowers as primary drivers of cybersecurity enforcement, while the ongoing pause of CMMC 2.0 implementation may increase reliance on enforcement actions to ensure compliance with NIST SP 800-171 and DFARS cybersecurity requirements.

Cybersecurity company Blackwall has reached a €1 billion valuation, jumping 368 per cent from approximately €221 million in the past year according to TopTech 2026, an independent ranking compiled by M&A advisory firm Prudentia Tallinn and Siena Secondary Fund. The company provides security infrastructure through its GateKeeper solution that filters malicious traffic before it reaches customer applications. Rando Rannus, General Partner at Siena Secondary Fund, noted that Blackwall's valuation reflects strong revenue growth benchmarked against comparable cybersecurity peers, with the €1B+ valuation expected to be confirmed through an upcoming funding round.