Dataminr Acquires ThreatConnect for $290 Million in All-Cash Deal

The acquisition combines real-time AI threat detection with internal security automation to create an integrated intelligence platform for enterprise and government clients.

Key Takeaways

• $290 million all-cash acquisition announced: Dataminr plans to acquire threat intelligence firm ThreatConnect in a deal expected to close by the end of 2025, pending regulatory approval.
• First Agentic AI-powered threat intelligence platform: The merger combines Dataminr’s real-time public data analysis from nearly 1 million sources with ThreatConnect’s internal threat management and automation capabilities to deliver context-aware, adaptive intelligence.
• Expanded enterprise and government reach: The combined customer base includes over 800 Dataminr clients, including a third of the Fortune 50 and over 100 government agencies, plus ThreatConnect’s 250 enterprise and government organizations.

Introduction

Dataminr announces plans to acquire threat intelligence firm ThreatConnect for $290 million in cash, marking one of the largest private cybersecurity transactions this year. The acquisition merges Dataminr’s AI-driven real-time event detection platform with ThreatConnect’s internal data capabilities to create what the companies describe as the industry’s first Agentic AI-powered client-tailored intelligence. The deal positions Dataminr to deliver unified threat intelligence that combines external public data signals with internal organizational data, addressing growing demand for contextual, automated security solutions.

Dataminr leverages AI to process public data signals, identifying critical events and threats across physical and cyber domains. The platform targets events ranging from natural disasters and civil unrest to data leaks and cyber incidents. Earlier this year, Dataminr raised $85 million, bringing total investment to over $1 billion as the company pursues aggressive expansion ahead of a potential public offering.

Key Developments

ThreatConnect, founded in 2011 and headquartered in Arlington, Virginia, offers a unified intelligence and operations platform that combines threat intelligence, security orchestration, automation, and cyber risk quantification. The company’s platform allows organizations to collect intelligence from multiple sources, process and correlate signals, and feed actionable output into workflows that help security teams respond swiftly. With over $20 million in funding, ThreatConnect serves 250 enterprises and government organizations, including Nike, Natwest, Wells Fargo, Wyndham Hotels, and agencies in the US, UK, and Australia.

The deal is structured as an all-cash transaction valued at $290 million and is expected to close by the end of 2025, pending regulatory approval and customary closing conditions. Following completion, ThreatConnect will operate as a subsidiary of Dataminr while retaining its brand and expanding product offerings within the Dataminr ecosystem. Existing ThreatConnect customers can expect continued support and development, along with accelerated innovation for current products.

The immediate product focus centers on unifying Dataminr’s Pulse for Cyber Risk with ThreatConnect’s threat prioritization and response automation into a joint offering. This integration aims to reduce mean time to detect and respond to threats while providing risk quantification in business terms, addressing a growing need among enterprise customers facing increasingly complex threat environments.

Market Impact

The acquisition reflects broader consolidation trends in the cybersecurity sector, where companies seek to combine complementary capabilities to address information overload and manual response delays. According to SecurityWeek, there have been over 330 cybersecurity M&A deals this year, with seven involving threat intelligence companies specifically.

The $290 million price tag represents substantial valuation for a private cybersecurity company, reflecting the strategic value of ThreatConnect’s technology and client roster. Dataminr recently closed a $300 million financing round in September 2025 and completed a $258 million contract with the U.S. Department of War (former Defense), demonstrating strong momentum in both commercial and government sectors.

The combined customer base strengthens Dataminr’s market position significantly. Dataminr serves over 800 customers, including a third of the Fortune 50, 1,500 newsrooms, and over 100 government agencies. ThreatConnect brings 250 enterprise and government clients, including four of the five largest tech companies and major global enterprises across financial services, hospitality, and manufacturing sectors.

Strategic Insights

Dataminr’s core strategy combines its AI-powered public data analysis—drawing from nearly 1 million sources in 150 languages—with ThreatConnect’s internal threat management and automation tools. This fusion creates what the companies term “Agentic AI-powered Client-Tailored intelligence,” delivering context-aware, adaptive threat intelligence tailored to each client’s unique environment. The approach addresses common security pain points including disparate data feeds, insufficient context, and slow manual reaction times.

While cybersecurity forms the initial focus, Dataminr plans to extend these capabilities into broader physical and operational risk management. The company will leverage ThreatConnect’s platform for additional use cases spanning digital and physical domains, creating a unified approach to enterprise risk management. This reflects an industry shift toward holistic risk platforms that address cyber, physical, and operational threats through integrated systems.

The move toward “Agentic AI”—AI agents that dynamically reason across internal and external data—represents a broader industry trend toward automation and contextual intelligence. ThreatConnect’s focus on translating technical vulnerabilities into financial and business-impact metrics aligns with growing demand for cyber risk quantification, especially as cyber threats increasingly affect business operations and insurance considerations.

Expert Opinions and Data

“With the acquisition of ThreatConnect, Dataminr will be able to deliver a more unified and robust threat intelligence service,” says Ted Bailey, CEO of Dataminr. “By uniting our AI platform with the capabilities of ThreatConnect, Dataminr will fuse external public data signals and internal client data.” Bailey emphasizes that dynamic reasoning capabilities will deliver real-time intelligence that is context-aware, personalized, and automatically adapts to individual customer needs.

“ThreatConnect has spent years helping enterprises and government cyber defense organizations bring order to vast amounts of threat and risk intelligence,” says Balaji Yelamanchili, CEO of ThreatConnect. The company’s emphasis on operationalizing threat intelligence embeds it into the security lifecycle, enabling teams to act swiftly and with confidence through automation, analytics, and knowledge capture tools.

“As a CISO, the fusion of Dataminr and ThreatConnect represents a leap forward in how we identify, interpret, and act on risk across every part of our enterprise,” says John Sapp, Chief Information Security Officer at Texas Mutual Insurance. Industry observers note that the integration allows organizations to move from reactive to proactive risk management, embedding resilience and speed into critical systems.

Jim Kavanaugh, WWT Co-Founder and CEO, adds that “by unifying Dataminr’s AI-powered real-time event, threat, and risk intelligence with ThreatConnect’s robust threat contextualization, prioritization, and response capabilities, we will be positioned to help organizations move from reactive to proactive—embedding resilience, speed, and confidence into the systems that power critical missions and industries worldwide.”

Conclusion

The acquisition represents a significant consolidation move in the cybersecurity sector, combining real-time event detection with threat intelligence automation to address growing enterprise demand for unified risk management. The integration creates a platform that processes both external public data signals and internal organizational data, delivering contextual intelligence tailored to specific customer environments. The deal strengthens Dataminr’s position in both commercial and government markets while advancing industry trends toward AI-driven, automated threat intelligence that translates technical risks into business impact metrics.