Cybersecurity stocks rise on WannaCrypt news, with the five biggest firms cumulatively adding nearly $6B in market cap on Monday
Lucinda Shen / Fortune :
Context & Ripple Effects
The WannaCrypt outbreak arrived just months after CB Insights counted a record year of venture backing for the sector — $3.1B across 279 cybersecurity startups in 2016 — meaning public markets and private capital were already leaning into security when the worm hit. The Monday move turned an attack headline into an instant re-rating of the category's largest listed players.
The pattern has since repeated: a later session saw CrowdStrike jump 12% and Okta rise 11% after IBM's CEO flagged cyber fears as a top customer priority, showing that both real incidents and executive sentiment now reliably move these stocks.
First-order effects
- The five biggest publicly traded cybersecurity firms collectively gained nearly $6B in market cap on Monday, as investors priced the outbreak as a demand signal for their products.
- Security buyers — enterprises reassessing patching and endpoint defenses in WannaCrypt's aftermath — become the near-term revenue source behind that valuation bump.
Second-order effects
- Private-market capital follows the public re-rating: with VC investment already at records before the attack, the sector's fundraising case gets stronger, pushing more startups into a crowded field competing for the same enterprise budgets.
- Rivals outside the top five face pressure to demonstrate comparable breach-response capabilities or risk losing share as customers consolidate around the largest, most visible vendors.
Third-order effects
- If every major incident converts into a durable valuation gain, cybersecurity solidifies from an episodic IT purchase into a permanently capitalized defensive industry — one where vendor fortunes are structurally tied to attacker activity.
- Repeated event-driven rallies point toward concentration: capital and customers flowing to the biggest names, while smaller vendors must differentiate on niche capability to survive.
The trend: Major breaches keep converting into lasting capital inflows and valuation gains for security vendors, making cybersecurity one of the few sectors that monetizes its own bad news.