Blog
When Your Vendor’s AI Becomes Your Problem
How closely are you vetting your 3rd Party Service Providers?
What Most PortCos Actually Need Isn’t More Cyber Hype, It’s More Cyber Honesty
There's a quiet problem running through private equity portfolio management, and it has nothing to do with firewalls or zero-day vulnerabilities. It has to do with advice. Too many portfolio companies are receiving cybersecurity guidance that is either over-engineered...
What Portfolio Cyber Incidents Actually Look Like (and Why It Matters for Private Equity)
From Visibility to Insight Black Creek Cyber’s PortCo ShieldTM was designed to give private equity firms a clear, practical view of cybersecurity across their portfolio. Built around BCC’s Top 7 Cyber Poverty Line, it focuses on what actually needs to be done, and...
Backups Are Not a Strategy: Why Recovery Confidence Matters More
In the middle of a recent incident triage, a familiar theme surfaced, one that comes up far too often in cyber discussions: Many companies say they have backups. Far fewer have confidence they can actually recover. These are not the same thing. Backups, on their own,...
The 10-Minute Cyber Diligence Test
Cybersecurity diligence in private equity has a reporting problem: it’s not digestible. Buyers don’t need more detail, they need an investment-grade view of risk and clear, pragmatic recommendations on what to do next. In the early stages of a transaction, diligence...
Black Creek Cyber Incident Support: What Cyber Looks Like in the Real World
At 8:42am on a Tuesday, a Private Equity client forwarded an email to Black Creek Cybersecurity. Subject line: “User Account Compromise” They proceeded to outline the timeline of events and steps taken. Account compromised confirmed by Microsoft 2/3/2026 at 3:44:49...
When Cyber Attacks Push Prices Up: What PE Firms Need to Know
A recent report by the Identity Theft Resource Center (ITRC) highlighted something Private Equity firms should sit up and take notice of: two-fifths of small businesses have raised prices after suffering a cyber incident. Not because they wanted to. Because they had...
What Your PortCos Should Learn From the Jaguar Land Rover Attack
If you work in private equity, you probably saw the headlines around the Jaguar Land Rover (JLR) cyber incident, and winced. The attack disrupted production, froze key systems across the supply chain, and racked up an eyewatering £1.9 billion in impact. That’s not a...
A Wire Fraud Breakdown: What Happened, Why It Happened, and What We Can Learn
*Note: We've redacted the names of the sender and everyone included on CC from "the law firm" in the supporting images. This is because the scammer was advanced enough to use the real names, email addresses and titles of the lawyers and revenue coordinator from the...
Case Study: Building An Effective Cyber Program Without Burdening PortCos
How a Lower Mid-Market Private Equity Firm Built a Pragmatic & Effective Cybersecurity Program Without Burdening Its Portfolio Companies About the Firm A U.S.-based private equity firm with investments across multiple industries takes a...
get in touch
Have questions about how we can help you improve cybersecurity across your Private Equity Group and portfolio of companies? Contact us to learn more about how Black Creek can help.