Mandiant is the creator of OpenIOC (Open
Indicators of Compromise), an extensible
XML schema for the description of technical characteristics that identify
threats,
security hackers' methodologies, and evidence of compromise. In 2012, its revenues were over $100 million, up 76% from 2011. In February 2013, Mandiant released a report documenting evidence of
cyber attacks by the
People's Liberation Army, specifically
Pudong-based
PLA Unit 61398, targeting at least 141 organizations in the
United States and other
English-speaking countries extending as far back as 2006. In the report, Mandiant referred to the espionage unit as "APT1". In December 2013, Mandiant was acquired by
FireEye for $1 billion. In October 2020, the company announced Mandiant Advantage, a subscription-based
SaaS platform designed to augment and automate security response teams which combined the threat intelligence gathered by Mandiant and data from cyber incident response engagements; in December, the company investigated a major
supply chain attack through
SolarWinds software in U.S. government infrastructure. In May 2021, Mandiant was contracted to assist in the response to a ransomware incident impacting
Colonial Pipeline, a fuel pipeline operator that supplies close to half of the gasoline, diesel, and other fuels to the
East Coast of the U.S. In June, the company was spun off FireEye as part of the latter's acquisition by
Symphony Technology Group. In August, the company acquired Intrigue, which specialized in surface management. In 2022,
Axios reported that Mandiant reporters identified a pro-
China disinformation campaign targeting American voters ahead of the
2022 midterm elections. On May 4, 2023, Mandiant announced its integration for MISP, Splunk SIEM and SOAR. In March 2024, Mandiant assisted with the investigation of the
Snowflake data breach, where Snowflake’s customers were targeted in a massive data theft and extortion campaign. Targeted customers included
Ticketmaster,
Advance Auto Parts,
Santander Bank,
Neiman Marcus,
LendingTree,
AT&T,
Pure Storage, and
Bausch Health.
Acquisition by Google In March 2022, it was announced that the company would be acquired by
Google for $5.4 billion and subsequently integrated into the
Google Cloud division. Following the announcement,
Fortune reported that while the deal could face antitrust scrutiny, the acquisition "could help increase competition" rather than harm it. In April 2022, it was reported that the
Department of Justice (DOJ) Antitrust Division was probing the deal for potential violations of federal antitrust law. However, Mandiant revealed in July 2022 that the DOJ granted the acquisition approval. Following a review over potential competition concerns, the
Australian Competition & Consumer Commission (ACCC) announced it would not oppose the deal. On September 12, 2022, the deal closed and integration between Mandiant and Google Cloud began. Following the acquisition, Mandiant was allowed to maintain its brand as a subsidiary of Google Cloud. == Flare-On ==