At Rendition Infosec, we’ve worked a fair number of breaches involving new organization acquisitions. In every case, the acquiring organization failed to perform good due diligence on the purchased organization. The value they paid to acquire the organizations was in every case too high, since the price was calculated without knowing about an ongoing breach. The purchasing organization is left holding the bag in these cases. The cost of threat hunting, while not cheap, is far cheaper than making a bad purchase. The acquiring organization should use threat hunting from external teams as a resource.”]
Source: http://malwarejake.blogspot.com/2017/01/the-yahoo-sale-delay-is-good-news-for.html