Activist investors have intensified their pursuit of mergers and acquisitions (M&A) as their primary strategy for driving corporate change, with demands for sales of US-based companies surging by nearly 50% in the first half of 2026. This marks a significant pivot from traditional shareholder engagement tactics, as revealed in a comprehensive report by Diligent Market Intelligence, in association with Sodali & Co. and Sullivan & Cromwell. The findings highlight a strategic recalibration by activist funds seeking to capitalize on perceived opportunities within the current dealmaking environment.

The report, which analyzed activism, voting, compensation, and activist short data from January to June 2026, identified a notable increase in shareholder activism focused on M&A. Diligent recorded 47 specific demands for US targets to initiate sales processes during this period, representing a substantial jump from the same timeframe in the previous year. This surge suggests a concerted effort by activist investors to leverage their influence to orchestrate corporate sales, aiming to unlock shareholder value through strategic transactions.

"Activists began leaning into M&A in late 2025 and carried that momentum into 2026, showing their determination to maximize returns while the dealmaking window is perceived to be open," stated Josh Black, editor-in-chief of Diligent Market Intelligence, in the report. This observation underscores a pragmatic approach by activists, who are actively adapting to market conditions and investor sentiment to achieve their objectives. The prevailing perception of a favorable dealmaking climate likely emboldened these investors to pursue M&A-driven strategies more aggressively.

Shifting Tactics: From Proxy Fights to Strategic Sales

Concurrently, the report indicates a marked decline in activist investors’ reliance on proxy contests – the traditional battleground for shareholder influence fought through contested board elections. In the first half of 2026, only 12 proxy contests were initiated, a significant reduction from previous years. This represents a 33% decrease compared to the first half of 2025 and a substantial 66% decline from the same period in 2024. Diligent attributes this downturn to increased market volatility, potentially exacerbated by geopolitical uncertainties, which may have made costly and uncertain proxy fights less appealing.

Instead of confronting boards at the ballot box, a growing preference for settlement is evident. Activist investors achieved remarkable success in securing board seats through negotiated agreements. In early 2026, 84 out of 85 board seats sought by activists were obtained through settlements, underscoring the willingness of companies to avoid protracted disputes. However, this shift towards amicable resolutions has come at a cost: the time required to reach these settlements has more than doubled, escalating from an average of 17 days in 2025 to 36 days in 2026. This suggests that while companies may be more inclined to settle, the negotiation process itself is becoming more complex and time-consuming.

Further reinforcing the trend away from traditional shareholder votes, the number of shareholder proposals brought to a vote at US-based annual meetings also saw a significant decline. Diligent reported a drop of over 15%, from 456 proposals in early 2025 to 386 in early 2026. This reduction points to a broader strategy by activists to explore alternative engagement methods. These include more discreet approaches such as private negotiations with management, leveraging legal challenges, and employing "withhold" campaigns, which aim to pressure directors by encouraging shareholders to withhold their votes for their re-election.

Data Security Paradox: Confidence vs. Concerns

In a separate yet equally compelling development, a new survey by Perforce Software has illuminated a stark paradox in corporate data security practices. While an overwhelming majority of company leaders express near-unanimous confidence in their ability to protect sensitive data from malicious actors, a significant percentage simultaneously harbor deep concerns about data breaches and related vulnerabilities.

The survey, which polled over 500 enterprise leaders from global companies with revenues exceeding one billion dollars and workforces of 25,000 or more, revealed that an astonishing 98% of respondents feel confident in their organizations’ data protection capabilities. This high level of self-assurance, however, is juxtaposed with the fact that 77% of these same leaders are concerned about data breaches and theft specifically within non-production data environments. Furthermore, 74% expressed anxieties regarding potential audit failures or non-compliance issues related to data governance.

These concerns are not merely theoretical. The Perforce survey found that a substantial 43% of organizations have experienced audit failures, and 34% have endured breaches or theft involving non-production data. These statistics underscore a significant gap between perceived security and actual risk exposure. The increasing volume of data requiring protection further compounds this challenge. More than half (57%) of respondents indicated that the amount of sensitive data residing in non-production environments is on the rise. This growth is attributed to the escalating use of data for informed decision-making and the imperative for faster product release cycles, which often necessitate the duplication and movement of sensitive data into less controlled environments.

Barriers to Protection and the AI Complication

The obstacles hindering effective data protection in non-production settings are multifaceted. According to the survey, nearly a quarter of respondents cited concerns about data quality and the significant effort required to secure these environments as primary barriers. This suggests that companies struggle with the practicalities of implementing robust security measures for data that is not part of their core production systems.

The rapid integration of Artificial Intelligence (AI) into business operations introduces another layer of complexity to data security. Despite 86% of organizations having established AI data privacy mandates and 98% feeling confident about protecting sensitive data within AI workflows, a significant portion of leaders remain apprehensive. Between 62% and 68% of respondents expressed concerns about potential data leaks and breaches involving training data used for AI models. This indicates that while companies are embracing AI, they are also acutely aware of the novel security risks it presents, particularly concerning the integrity and confidentiality of the data used to train these powerful systems.

Broader Implications for Corporate Governance and Risk Management

The trends identified in both the Diligent and Perforce reports carry significant implications for corporate governance, risk management, and compliance functions.

For activist investors, the shift towards M&A demands signals a more aggressive and potentially disruptive phase of shareholder activism. Companies that are perceived as undervalued or as possessing assets that could be better managed by another entity may face heightened pressure to divest. This necessitates robust M&A readiness and strategic planning, even for companies that are not actively considering a sale. Boards and management teams must be prepared to articulate their long-term value creation strategies and to defend against activist proposals that may not align with their broader corporate vision. The increased time to settlement also suggests that companies need to invest in skilled negotiation teams and potentially in improved internal processes for handling activist engagements.

The data security findings from the Perforce survey highlight a critical area of vulnerability for organizations of all sizes. The disconnect between perceived confidence and actual reported incidents suggests a potential blind spot in risk assessment and mitigation strategies. The focus on non-production environments is particularly concerning, as these often house vast amounts of sensitive data that may be less rigorously protected than production systems. The rise of AI further complicates this landscape, demanding new security frameworks and proactive measures to address the unique risks associated with AI data. Companies must prioritize a holistic approach to data security that encompasses all environments, including non-production and AI-specific contexts, and ensure that their confidence is grounded in demonstrable security controls and a clear understanding of their risk exposure.

In essence, these reports collectively paint a picture of a dynamic corporate landscape where shareholder engagement is evolving towards more direct and potentially disruptive M&A tactics, while simultaneously, organizations grapple with the persistent and growing challenge of ensuring robust data security in an increasingly complex digital environment. Boards and executive leadership must navigate these evolving pressures with strategic foresight, robust risk management frameworks, and a commitment to transparent and effective governance.

By