
McAfee Enterprise
Enterprise cybersecurity vendor acquired by STG; merged with FireEye to form Trellix in 2022.
Last refreshed: 8 May 2026 · Appears in 1 active topic
How much McAfee Enterprise code is still inside Trellix and what was exposed?
Timeline for McAfee Enterprise
Mentioned in: RansomHouse posts Trellix internal screenshots as extortion leverage
Cybersecurity: Threats and DefencesTrellix discloses 21-day-old breach of source-code repository
Cybersecurity: Threats and DefencesWhat happened to McAfee Enterprise?
Is McAfee Enterprise the same as Trellix?
How did McAfee Enterprise and FireEye become Trellix?
Background
McAfee Enterprise was the enterprise security division of McAfee LLC, acquired by private equity firm Symphony Technology Group (STG) in March 2021 for approximately $4 billion. McAfee Enterprise produced endpoint protection, network security, data loss prevention, and security operations centre (SOC) tooling used by governments and large enterprises globally, including UK public sector customers.
In January 2022, STG merged McAfee Enterprise with FireEye — another STG acquisition — to form Trellix, a unified extended detection and response (XDR) vendor. The McAfee Enterprise brand was retired at this point; Trellix inherited the combined product portfolio, customer base, and engineering teams. The consumer McAfee business (antivirus products) was sold separately to a different consortium and retained the McAfee name.
The brand's relevance to the Lowdown cyber-threats topic is its role as one of the two predecessors of Trellix, which suffered a source-code breach in April 2026. McAfee Enterprise's legacy code and detection signatures form part of the Trellix codebase that RansomHouse accessed.