Management called FY2026 the hardest year Booz Allen had faced as a public company. Then, as FY2027 got underway, the company dropped $720 million on a defense software acquisition that tells investors exactly what it thinks the next cycle will reward.
Booz Allen completed its acquisition of the Ultra I&C Mission Solutions business on August 24, 2026, deepening its technology solutions for national security missions. The deal combines Ultra Mission Solutions’ defense technology software, encryption, and edge-compute products with Booz Allen’s AI-driven battle management, resilient communications, and edge infrastructure capabilities. The timing is not accidental.
The Case Management Is Making
CEO Horacio Rozanski said fiscal 2026 was Booz Allen’s most challenging year as a public company, shaped by unusual pressure in the Civil business and broader market disruption. The numbers back that up. Q4 FY26 revenue fell 6.4% year over year to $2.8 billion. Management expects Civil to decline again in fiscal 2027, with the first half under the most pressure.
Against that backdrop, the Ultra deal is management’s answer to a pointed question: if civil government work keeps shrinking, what grows instead? Booz Allen expects revenue from the acquisition to grow at a strong double-digit rate for the next several years, with EBITDA margins well above 20%. That is meaningfully above the company’s current blended margin. Ultra Mission Solutions specializes in software, encryption, and edge-compute products designed for contested environments, with command-and-control and secure data movement as key areas of focus.
What Iran’s Hackers Just Demonstrated
The external environment delivered an unusually direct catalyst ahead of the deal close. The FBI and EPA warned that malicious cyber actors are conducting attacks targeting operational technology devices, including Rockwell Automation/Allen-Bradley PLCs. Since July 27, water and wastewater utility companies in at least seven states have reported incidents to the FBI, and some of that activity degraded water operations. Acting CISA Director Nick Andersen told Nextgov/FCW that officials are still seeing internet-accessible controllers during recovery efforts, and the same report described the activity as affecting about 12 states.
On July 28, Minnesota IT officials disclosed that a coordinated cyberattack targeted more than 30 community water systems in Minnesota on July 26 and July 27. In these kinds of incidents, federal agencies have warned that attackers can tamper with internet-exposed PLC configurations, including by changing settings and turning on and setting passwords, which can result in loss of view and, in some cases, loss of function of connected equipment. U.S. intelligence agencies have assessed that Iran was likely behind the Minnesota activity, and multiple outlets have reported officials suspect Iran-linked actors, including the IRGC-affiliated group CyberAv3ngers, though public statements have not uniformly described the attribution as definitive.
The gap these attacks exposed is structural, not incidental. Federal partners have repeatedly warned against exposing industrial controllers to the public internet, and recent joint advisories have pointed operators to earlier Rockwell guidance on disconnecting devices from the internet and hardening PLCs. That pattern, sustained negligence across thousands of utilities, is the exact condition that accelerates federal OT security spending.
The Investment Question
Q1 FY27 revenue was $2.8 billion, down 4.2% year over year, but adjusted EBITDA rose 7.4% to $334 million, with margin improving 130 basis points to 11.9%. Management reaffirmed full-year guidance, with FY27 revenue expected between $11.2 billion and $11.7 billion, and commentary that results are expected to be back-half weighted. That second-half lean matters: if water-sector and broader OT security spending accelerates through fall congressional appropriations, Booz Allen’s national security portfolio is first in line.
The bull case rests on two reinforcing trends. Domestic critical infrastructure attacks create political pressure for emergency cyber spending. Utilities also face tightening reporting and compliance expectations under federal cyber rules, but specific rulemaking timelines vary by agency and are still evolving. Compliance mandates produce consulting and software contracts. Booz Allen, newly armed with Ultra’s encryption and edge-compute stack, is positioned to capture both.
The bear case is simpler. Management projects Civil will decline again in fiscal 2027, citing difficult comparisons, prior contract cuts, Treasury-related reductions, and smaller, shorter recompetes. BAH shares have fallen roughly 31% to 32% over the past year, depending on the measurement date. The Ultra acquisition was financed in part with new debt, including a $1.2 billion senior notes offering that Booz Allen said it priced in late July. A second-half cyber spending surge is a thesis, not a guarantee.
Bottom Line
Booz Allen spent $720 million on exactly the right product category at exactly the right moment in the threat cycle. That does not make the stock an automatic winner: civil headwinds are real, the debt load grew, and the second-half recovery in national security work remains unconfirmed. What investors should watch is whether the water-utility crisis accelerates emergency OT security contracts through Q3, and whether management’s promise of strong double-digit growth from Ultra starts showing up in backlog numbers by the November earnings call. If those signals land, the FY27 transition year starts looking more like a pivot point.
