US Companies Increasingly Face Investor Pushback on M&A Deals

Why It Matters

The surge in activist opposition forces companies to reassess deal strategies and governance practices, while rising cyber costs and regulatory gaps expose financial and operational vulnerabilities that could erode shareholder value.

Key Takeaways

• Activist push‑to‑sell campaigns up 29% in 2025.
• Over 30 US firms faced M&A investor resistance.
• PE cyber attacks cost average $2.1 million per incident.
• 96% of PE firms expect higher portfolio cyber risk.
• 67% of logistics firms lack MPCI tracking systems.

Pulse Analysis

Activist shareholder campaigns have hit a five‑year peak, driven by a 29% jump in push‑to‑sell demands and more than 30 U.S. companies confronting resistance to merger and acquisition transactions. This heightened scrutiny forces boards to prioritize transparent governance, align executive compensation, and engage early with investors to mitigate deal disruption. The trend also nudges companies toward settlement strategies, as 89% of board seat gains now arise from negotiated agreements rather than contested proxies.

Private‑equity firms are grappling with a parallel crisis: cyber‑risk exposure. The Kroll survey shows an average $2.1 million loss per attack, with 94% of firms reporting financial impact. Larger funds are integrating cybersecurity due diligence into transaction workflows, yet smaller firms lag, relying on manual monitoring and third‑party services. As cyber threats intensify, robust risk frameworks and dedicated cyber leadership become essential to protect portfolio valuations and ensure smooth exits.

Beyond the U.S., regulatory compliance is emerging as a critical risk vector. In the UAE, half of logistics professionals remain unprepared for the Maritime Pre‑Load Cargo Information (MPCI) mandate, lacking tracking systems and clear responsibility assignments. Enforcement slated for early 2026 could disrupt supply chains and increase compliance costs for firms unready to meet electronic filing deadlines. Together, activist pressure, cyber vulnerability, and regulatory enforcement underscore the need for integrated risk governance across industries.