Hubbry Logo
Gen DigitalGen DigitalMain
Open search
Gen Digital
Community hub
Gen Digital
logo
8 pages, 0 posts
0 subscribers
Be the first to start a discussion here.
Be the first to start a discussion here.
Contribute something
Gen Digital
Gen Digital
from Wikipedia

Gen Digital Inc. (formerly Symantec Corporation and NortonLifeLock Inc.) is a multinational software company co-headquartered in both Prague, Czech Republic (EU) and Tempe, Arizona (USA). The company provides cybersecurity software, financial technology, and services. Gen is a Fortune 500 company and a member of the S&P 500 stock-market index. It is listed at both NASDAQ and Prague Stock Exchange.[3] Its portfolio includes Norton, Avast, LifeLock, Avira, AVG, ReputationDefender, MoneyLion and CCleaner.[4]

Key Information

On October 9, 2014, Symantec declared it would split into two independent publicly traded companies by the end of 2015. One company would focus on security, the other on information management. On January 29, 2016, Symantec sold its information-management subsidiary, named Veritas, and which Symantec had acquired in 2004,[5] to The Carlyle Group.[6] On August 8, 2019, Broadcom announced they would be acquiring the Enterprise Security software division of Symantec for $10.7 billion.[7] After the acquisition, Symantec became known as NortonLifeLock.[8][9] After completing its merger with Avast in September 2022, the company adopted the name Gen Digital.[10]

History

[edit]

1982 to 1989

[edit]

Founded in 1982 by Gary Hendrix with a National Science Foundation grant, Symantec was originally focused on artificial intelligence-related projects, including a database program.[11] Hendrix hired several Stanford University natural language processing researchers as the company's first employees.[11]

In 1984, it became clear that the advanced natural language and database system that Symantec had developed could not be ported from DEC minicomputers to the PC.[12] This left Symantec without a product, but with expertise in natural language database query systems and technology.[13] As a result, later in 1984, Symantec was acquired by another, smaller software startup company, C&E Software, founded by Denis Coleman and Gordon Eubanks and headed by Eubanks.[13] C&E Software developed a combined file management and word processing program called Q&A.[13]

The merged company retained the name Symantec.[13] Eubanks became its chairman, Vern Raburn, the former president of the original Symantec, remained as president of the combined company.[14] The new Symantec combined the file management and word processing functionality that C&E had planned, and added an advanced Natural Language query system (designed by Gary Hendrix and engineered by Dan Gordon) that set new standards for ease of database query and report generation. The natural language system was named "The Intelligent Assistant". Turner chose the name of Q&A for Symantec's flagship product, in large part because the name lent itself to use in a short, easily merchandised logo. With a user interface designed by director of product management, Brett Walter, Q&A was released in November 1985.[citation needed]

In 1986, Vern Raburn and Gordon Eubanks swapped roles, and Eubanks became CEO and president of Symantec, while Raburn became its chairman.[15] After this change, Raburn had little involvement with Symantec, and in a few years, Eubanks added chairmanship to his other roles.[citation needed] After a slow start for sales of Q&A in the fall of 1985 and spring of 1986, Rod Turner, a Symantec Sr. Executive, signed up a new advertising agency called Elliott/Dickens, embarked on an aggressive new advertising campaign, and came up with the "Six Pack Program" in which all Symantec employees, regardless of role, went on the road, training and selling nationwide in the United States. Turner named it Six Pack because employees were to work six days a week, see six dealerships per day, train six sales representatives per store and stay with friends free or at Motel 6.[16] Simultaneously, a promotion was run jointly with SofSell (which was Symantec's exclusive wholesale distributor in the United States for the first year that Q&A was on the market). This promotion was very successful in encouraging dealers to try Q&A.

During this time, Symantec was advised by its board members Jim Lally and John Doerr that if it would cut its expenses and grow revenues enough to achieve cash flow break-even, then Kleiner, Perkins, Caufield & Byers would back the company in raising more venture capital. To accomplish this, the management team worked out a salary reduction schedule where the chairman and the CEO would take zero pay, all vice presidents would take a 50% pay cut, and all other employees' pay was cut by 15%. Two employees were laid off. Eubanks also negotiated a sizable rent reduction on the office space the company had leased in the days of the original Symantec. These expense reductions, combined with strong international sales of Q&A, enabled the company to attain break-even.

The significantly increased traction for Q&A from this re-launch grew Symantec's revenues substantially, along with early success for Q&A in international markets (uniquely a German version was shipped three weeks after the United States version, and it was the first software in the world that supported German Natural Language) following Turner's having emphasized establishing international sales distribution and multiple language versions of Q&A from the initial shipment.

In 1985, Rod Turner negotiated the publishing agreement with David Whitney for Symantec's second product, which Turner named NoteIt (an annotation utility for Lotus 1-2-3). It was evident to Turner that NoteIt would confuse the dealer channel if it was launched under the Symantec name because Symantec had built up interest by that stage in Q&A (but not yet shipped it), and because the low price for the utility would not be initially attracted to the dealer channel until demand had been built up. Turner felt that the product should be marketed under a unique brand name.

Turner and Gordon E. Eubanks Jr., then chairman of Symantec Corporation, agreed to form a new division of Symantec, and Eubanks delegated the choice of name to Turner. Turner chose the name Turner Hall Publishing, to be a new division of Symantec devoted to publishing third-party software and hardware. The objective of the division was to diversify revenues and accelerate the growth of Symantec. Turner chose the name Turner Hall Publishing, using his last name and that of Dottie Hall (Director of Marketing Communications) to convey the sense of a stable, long-established, company.[17][18] Turner Hall Publishing's first offering was Note-It, a notation utility add-in for Lotus 1-2-3, which was developed by David Whitney, and licensed to Symantec.[19][20] Its second product was the Turner Hall Card, which was a 256k RAM, half slot memory card, initially made to inexpensively increase the available memory for Symantec's flagship product, Q&A. The Turner Hall division also marketed the card as a standalone product. Turner Hall's third product, also a 1-2-3 add-in was SQZ! a Lotus 1-2-3 spreadsheet compression utility developed by Chris Graham Synex Systems.[21] In the summer of 1986 Eubanks and Turner recruited Tom Byers from Digital Research, to expand the Turner Hall Publishing product family and lead the Turner Hall effort.

By the winter of 1986–87, the Turner Hall Publishing division had achieved success with NoteIt, the Turner Hall Card and SQZ!. The popularity of these products, while contributing a relatively small portion of revenues to Symantec, conveyed the impression that Symantec was already a diversified company, and indeed, many industry participants were under the impression that Symantec had acquired Turner Hall Publishing. In 1987, Byers recruited Ted Schlein into the Turner Hall Product Group to assist in building the product family and in marketing.

Revenues from Q&A, and Symantec's early launch into the international marketplace, combined with Turner Hall Publishing, generated the market presence and scale that enabled Symantec to make its first merger/acquisition, in February 1987, that of Breakthrough Software, maker of the TimeLine project management software for DOS. Because this was the first time that Symantec had acquired a business that had revenues, inventory, and customers, Eubanks chose to change nothing at BreakThrough Software for six months, and the actual merger logistics started in the summer of 1987, with Turner being appointed by Eubanks as general manager of the TimeLine business unit, Turner was made responsible for the successful integration of the company into Symantec and ongoing growth of the business, with P&L. There was a heavy emphasis placed on making the minimum disruption by Eubanks and Turner.

Soon after the acquisition of TimeLine/Breakthrough Software, Eubanks reorganized Symantec, structuring the company around product-centric groups, each having its development, quality assurance, technical support, and product marketing functions, and a general manager with profit and loss responsibility. Sales, finance, and operations were centralized functions that were shared. This structure lent itself well to Symantec's further growth through mergers and acquisitions. Eubanks made Turner general manager of the new TimeLine Product Group, and simultaneously of the Q&A Product Group, and made Tom Byers general manager of the Turner Hall Product Group. Turner continued to build and lead the company's international business and marketing for the whole company.

At the TimeLine Product Group, Turner drove strong marketing, promotion and sales programs to accelerate momentum. By 1989 this merger was very successful—product group morale was high, TimeLine development continued apace, and the increased sales and marketing efforts applied built the TimeLine into the clear market lead in PC project management software on DOS. Both the Q&A and TimeLine product groups were healthily profitable. The profit stream and merger success set the stage for subsequent merger and acquisition activity by the company, and indeed funded the losses of some of the product groups that were subsequently acquired.[17] In 1989, Eubanks hired John Laing as VP worldwide sales, and Turner transferred the international division to Laing. Eubanks also recruited Bob Dykes to be executive vice president for operations and finance, in anticipation of the upcoming IPO. On June 23, 1989, Symantec had its IPO, opening on NASDAQ as "SYMC".[22]

1990 to 1999

[edit]

In May 1990, Symantec announced its intent to merge with and acquire Peter Norton Computing, a developer of various utilities for DOS. Turner was appointed as product group manager for the Norton business, and made responsible for the merger, with P&L responsibility. Ted Schlein was made product group manager for the Q&A business.

The Peter Norton group merger logistical effort began immediately while the companies sought approval for the merger, and in August 1990, Symantec concluded the purchase—by this time the combination of the companies was already complete. Symantec's consumer antivirus and data management utilities are still marketed under the Norton name. At the time of the merger, Symantec had built upon its Turner Hall Publishing presence in the utility market, by introducing Symantec Antivirus for the Macintosh (SAM), and Symantec Utilities for the Macintosh (SUM). These two products were already market leaders on the Mac, and this success made the Norton merger more strategic. Symantec had already begun the development of a DOS-based antivirus program one year before the merger with Norton. The management team had decided to enter the antivirus market in part because it was felt that the antivirus market entailed a great deal of ongoing work to stay ahead of new viruses. The team felt that Microsoft would be unlikely to find this effort attractive, which would lengthen the viability of the market for Symantec. Turner decided to use the Norton name for obvious reasons, on what became the Norton Antivirus, which Turner and the Norton team launched in 1991. At the time of the merger, Norton revenues were approximately 20 to 25% of the combined entity. By 1993, while being led by Turner, Norton product group revenues had grown to approximately 82% of Symantec's total.

At one time Symantec was also known for its development tools, particularly the THINK Pascal, THINK C, Symantec C++, Enterprise Developer and Visual Cafe packages that were popular on the Macintosh and IBM PC compatible platforms. These product lines resulted from acquisitions made by the company in the late 1980s and early 1990s. These businesses and the Living Videotext acquisition were consistently unprofitable for Symantec, and these losses diverted expenditures away from both the Q&A for Windows and the TimeLine for Windows development efforts during the critical period from 1988 through 1992. Symantec exited this business in the late-1990s as competitors such as Metrowerks, Microsoft and Borland gained significant market share.

In 1996, Symantec Corporation was accused of misleading financial statements in violation of GAAP.[23]

2000 to 2014

[edit]
Symantec sponsored Porsche 997 GT3 Cup competing at the 2012 Petit Le Mans

From 1999 to April 2009, Symantec was led by CEO John W. Thompson, a former VP at IBM. At the time, Thompson was the only African-American leading a major US technology company. He was succeeded in April 2009 by the company's long-time Symantec executive Enrique Salem.[24] Under Salem, Symantec completed the acquisition of Verisign's Certificate Authority business, dramatically increasing their share of that market.

In 2009, Symantec released a list of the then "100 dirtiest websites", which contain the most malware as detected by Norton Safe Web.[25][26]

Former Symantec headquarters in Mountain View, California

Salem was abruptly fired in 2012 for disappointing earnings performance and replaced by Steve Bennett, a former CEO of Intuit and GE executive.[27] In January 2013, Bennett announced a major corporate reorganization, with the goal of reducing costs and improving Symantec's product line. He said that sales and marketing "had been high costs but did not provide quality outcomes". He concluded that "Our system is just broken".[28]

Robert Enderle of CIO.com reviewed the reorganization and noted that Bennett was following the General Electric model of being product-focused instead of customer-focused. He concluded "Eliminating middle management removes a large number of highly paid employees. This will tactically improve Symantec's bottom line but reduce the skills needed to ensure high-quality products in the long term."[29]

In March 2014, Symantec fired Steve Bennett from his CEO position and named Michael Brown as interim president and chief executive. Including the interim CEO, Symantec has had 3 CEOs in less than two years.[30][31] On September 25, 2014, Symantec announced the appointment of Michael A. Brown as its president and chief executive officer.[32] Brown had served as the company's interim president and chief executive officer since March 20, 2014.[33] Mr. Brown has served as a member of the company's board of directors since July 2005 following the acquisition of VERITAS Software Corporation. Mr. Brown had served on the VERITAS board of directors since 2003.[34]

2014 information management business spin-off

[edit]

On October 9, 2014, Symantec declared that the company would separate into two independent publicly traded companies by the end of 2015.[35] Symantec will continue to focus on security, while a new company will be established focusing on information management. Symantec confirmed on January 28, 2015, that the information management business would be called Veritas Technologies Corporation, marking a return of the Veritas name.[36] In August 2015, Symantec agreed to sell Veritas to a private equity group led by The Carlyle Group for $8 billion. The sale was completed by February 2016, turning Veritas into a privately owned company.[37]

2016 to present

[edit]

In July 2016, Symantec introduced a product to help carmakers protect connected vehicles against zero-day attacks. The Symantec Anomaly Detection for Automotive is an IoT product for manufacturers and uses machine learning to provide in-vehicle security analytics.[38] Greg Clark assumed the position of CEO in August 2016.[39]

In November 2016, Symantec announced its intent to acquire identity theft protection company LifeLock for $2.3 billion.[40]

In August 2017, Symantec announced that it had agreed to sell its business unit that verifies the identity of websites to Thoma Bravo. With this acquisition, Thoma Bravo plans to merge the Symantec business unit with its own web certification company, DigiCert.[41]

On January 4, 2018, Symantec and BT (formerly British Telecom) announced their partnership that provides new endpoint security protection.[42]

In May 2018, Symantec initiated an internal audit to address concerns raised by a former employee,[43][44] causing it to delay its annual earnings report.[45]

In August 2018, Symantec announced that the hedge fund Starboard Value had put forward five nominees to stand for election to the Symantec board of directors at Symantec's 2018 Annual Meeting of Stockholders.[46] This followed a Schedule 13D filing by Starboard showing that it had accumulated a 5.8% stake in Symantec.[47] In September 2018, Symantec announced that three nominees of Starboard were joining the Symantec board, two with immediate effect (including Starboard Managing Member Peter Feld) and one following the 2018 Annual Meeting of Stockholders.[48]

On May 9, 2019, Symantec announced that Clark would be stepping down and that board member Rick Hill, previously put forward by Starboard, had been appointed interim president and CEO.[46] Vincent Pilette also joined Symantec as its new CFO.[46]

On August 8, 2019, Broadcom announced they would be acquiring the Enterprise software division of Symantec for $10.7 billion.[7] This is after having attempted to purchase the whole company. The Norton family of products will remain in the Symantec portfolio. The sale closed on November 4, 2019, and subsequently, the company adopted the NortonLifeLock name and relocated its headquarters from Mountain View, California to LifeLock's offices in Tempe, Arizona.[9][49]

In 2021, a crypto-miner was added to the Norton 360 product, called Norton Crypto. Once activated by the user, Norton Crypto mines Ethereum (ETH) using the installed machine's graphics card while idle. The program also creates a secure wallet on the same machine.[50][51] Norton announced it was permanently disabling the feature on September 14, 2022, due to the Ethereum merge.[52]

Enterprise Office Center building, Gen Digital co-headquarters in Prague

US-based NortonLifeLock and Avast, an European cybersecurity leader based in Czech Republic founded by Eduard Kučera and Pavel Baudiš in 1988[53] which was listed on the London Stock Exchange since its 2018 IPO there,[54] merged in a deal announced in July 2021 and completed in September 2022, forming a new multinational company called Gen Digital. This merger created a larger cybersecurity firm with a broader portfolio of brands and products, including Norton, Avast, LifeLock and others. The UK's Competition and Markets Authority approved the merger in September 2022.[55]

In December 2024, Gen Digital announced that it had entered into a definitive agreement to acquire MoneyLion.[56] In April 2025, Gen Digital completed its acquisition of MoneyLion in a $1 billion all-cash deal.[57]

In February 2025, Norton's antivirus software added Genie AI functionality for fraud protection.[58]

Products

[edit]

Norton

[edit]

Norton product line includes Norton AntiVirus, Norton Small Business, Norton Family, Norton Mobile Security, Norton Online Backup, Norton 360, Norton Utilities and Norton Computer Tune Up.[citation needed] Norton's line also includes LifeLock and ReputationDefender.

In 2012, PC Tools iAntiVirus was rebranded as a Norton product under the name iAntiVirus, and released to the Mac App Store. Also in 2012, the Norton Partner Portal was relaunched to support sales to consumers throughout the EMEA.[citation needed]

Avast

[edit]

Avast product line includes Avast Antivirus, Avast Premium Security, Avast Cleanup, Avast Secure Browser, and Avast SecureLine VPN. As of 2017, it is the most popular antivirus vendor on the market and it had the largest market share.[59]

AVG

[edit]

AVG product line includes AVG AntiVirus, AVG Internet Security, AVG Secure VPN, AVG PC TuneUp, and AVG Driver Updater. Previously a publicly company in February 2012, it was acquired by Avast in July 2016 for $1.3 billion.[60]

Avira

[edit]

Avira product line includes Avira Free Security, Avira Internet Security, Avira Prime and Avira Phantom VPN.

Other

[edit]

Other products offered by Gen Digital include CCleaner, Recuva, Speccy, Defraggler, HMA, and SONAR.

Mergers and acquisitions

[edit]

ACT!

[edit]

In 1993, Symantec acquired ACT! from Contact Software International. Symantec sold ACT! to SalesLogix in 1999. At the time it was the world's most popular CRM application for Windows and Macintosh.[61]

Veritas

[edit]

On December 16, 2004, Veritas and Symantec announced their plans for a merger. With Veritas valued at $13.5 billion, it was the largest software industry merger to date.[62] Symantec's shareholders voted to approve the merger on June 24, 2005; the deal closed successfully on July 2, 2005.[63] July 5, 2005, was the first day of business for the U.S. offices of the new, combined software company. As a result of this merger, Symantec includes storage- and availability-related products in its portfolio, namely Veritas File System (VxFS), Veritas Volume Manager (VxVM), Veritas Volume Replicator (VVR), Veritas Cluster Server (VCS), NetBackup (NBU), Backup Exec (BE) and Enterprise Vault (EV).[citation needed]

On January 29, 2016, Symantec sold Veritas to The Carlyle Group.[5]

Sygate

[edit]

On August 16, 2005, Symantec acquired Sygate,[64] a security software firm based in Fremont, California, with about 200 staff.[65] As of November 30, 2005, all Sygate personal firewall products were discontinued.[66]

Altiris

[edit]

On January 29, 2007, Symantec announced plans to acquire Altiris,[67] and on April 6, 2007, the acquisition was completed.[68] Altiris specializes in service-oriented management software that allows organizations to manage IT assets.[67] It also provides software for web services, security and systems management products. Established in 1998, Altiris is headquartered in Lindon, Utah.[69]

Vontu

[edit]

On November 5, 2007, Symantec announced its acquisition of Vontu, a Data Loss Prevention (DLP) company, for $350 million.[70]

Application Performance Management business

[edit]

On January 17, 2008, Symantec announced[71] that it was spinning off its Application Performance Management (APM) business and the i3 product line to Vector Capital.[72] Precise Software Solutions took over development, product management, marketing and sales for the APM business, launching as an independent company on September 17, 2008.[73]

PC Tools

[edit]

On August 18, 2008, Symantec announced the signing of an agreement to acquire PC Tools. Under the agreement, PC Tools would maintain separate operations. The financial terms of the acquisition were not disclosed. In May 2013, Symantec announced they were discontinuing the PC Tools line of internet security software.[74]

In December 2013, Symantec announced they were discontinuing and retiring the entire PC Tools brand and offering a non-expiring license to PC Tools Performance Toolkit, PC Tools Registry Mechanic, PC Tools File Recover and PC Tools Privacy Guardian users with an active subscription as of December 4, 2013.[75]

AppStream

[edit]

On April 18, 2008, Symantec completed the acquisition of AppStream, a nonpublic Palo Alto, California-based provider of endpoint virtualization software. AppStream was acquired to complement Symantec's endpoint management and virtualization portfolio and strategy.[76]

MessageLabs

[edit]

On October 9, 2008, Symantec announced its intent to acquire Gloucester-based MessageLabs (spun off from Star Internet in 2007) to boost its Software as a Service (SaaS) business. Symantec purchased the online messaging and Web security provider for about $695 million in cash.[77] The acquisition closed on November 17, 2008.[78]

PGP and GuardianEdge

[edit]

On April 29, 2010, Symantec announced its intent to acquire PGP Corporation and GuardianEdge.[79] The acquisitions closed on June 4, 2010, and provided access to established encryption, key management and technologies to Symantec's customers.[citation needed]

Verisign authentication

[edit]

On May 19, 2010, Symantec signed a definitive agreement to acquire Verisign's authentication business unit, which included the Secure Sockets Layer (SSL) certificate, Public Key Infrastructure (PKI), Verisign Trust and Verisign Identity Protection (VIP) authentication services.[80] The acquisition closed on August 9, 2010. In August 2012, Symantec completed its rebranding of the Verisign SSL Certificate Service by renaming the Verisign Trust Seal the Norton Secured Seal.[81] Symantec sold the SSL unit to DigiCert for US$950 million in mid 2017.[82]

RuleSpace

[edit]

Acquired on October 10, 2010, RuleSpace is a web categorisation product first developed in 1996.[83] The categorisation is, automated using what Symantec refers to as the Automated Categorization System (ACS). It is used as the base for content filtering by many UK ISP.[citation needed]

Clearwell Systems

[edit]

On May 19, 2011, Symantec announced the acquisition of Clearwell Systems for approximately $390 million.[84]

LiveOffice

[edit]

On January 17, 2012, Symantec announced the acquisition of cloud email-archiving company LiveOffice. The acquisition price was $115 million.[85] Last year,[ambiguous] Symantec joined the cloud storage and backup sector with its Enterprise Vault.cloud and Cloud Storage for Enterprise Vault software, in addition to a cloud messaging software, Symantec Instant Messaging Security cloud (IMS.cloud).[citation needed] Symantec stated that the acquisition would add to its information governance products,[85][86] allowing customers to store information on-premises, in Symantec's data centers, or both.

Odyssey Software

[edit]

On March 2, 2012, Symantec completed the acquisition of Odyssey Software. Odyssey Software's main product was Athena, which was device management software that extended Microsoft System Center software, adding the ability to manage, support and control mobile and embedded devices, such as smartphones and ruggedized handhelds.[64][87]

Nukona

[edit]

Symantec completed its acquisition of Nukona, a provider of Mobile Application Management (MAM), on April 2, 2012.[88] The acquisition agreement between Symantec and Nukona was announced on March 20, 2012.[89]

NitroDesk

[edit]

In May 2014 Symantec acquired NitroDesk, provider of TouchDown, the market-leading third-party EAS mobile application.[90]

Blue Coat Systems

[edit]

On June 13, 2016, it was announced that Symantec had acquired Blue Coat Systems for $4.65 billion.[91]

LifeLock

[edit]

In 2017, Symantec acquired LifeLock,[92][93] and renamed itself to NortonLifeLock in 2019.

Avira

[edit]

NortonLifeLock acquired German security firm Avira in December 2020 for $360 million.[94]

Avast

[edit]

In August 2021, NortonLifelock agreed to merge with Czech cybersecurity software company Avast. The UK Competition and Markets Authority formally cleared the $8.1 billion merger on September 2, 2022.[95] The company subsequently adopted the name Gen Digital.[10]

MoneyLion

[edit]

In December 2024, Gen Digital Inc. announced its intent to acquire MoneyLion at a transaction value of approximately $1 billion; the deal closed on April 17, 2025.[96] With the acquisition, MoneyLion's financial management tools and AI recommendation platform were added to Gen's portfolio.[97]

Locations around the world

[edit]

Gen Digital has dual headquarters in Prague, Czech Republic (EU) and Tempe, Arizona (USA).[98] It has development centers in India (Pune, Chennai and Bangalore)[citation needed] and also in the United States (Tempe, Arizona) and the Czech Republic (Prague). Additionally, the company has offices in Dublin, Ireland and London, United Kingdom.[99]

Security concerns and controversies

[edit]

Restatement

[edit]

On August 9, 2004, the company announced that it discovered an error in its calculation of deferred revenue, which represented an accumulated adjustment of $20 million.[100][101]

Endpoint bug

[edit]

The arrival of the year 2010 triggered a bug in Symantec Endpoint. Symantec reported that malware and intrusion protection updates with "a date greater than December 31, 2009, 11:59 pm [were] considered to be 'out of date.'" The company created and distributed a workaround for the issue.[102]

Scan evasion vulnerability

[edit]

In March 2010, it was reported that Symantec AntiVirus and Symantec Client Security were prone to a vulnerability that might allow an attacker to bypass on-demand virus scanning, and permit malicious files to escape detection.[103][104][citation needed]

Denial-of-service attack vulnerabilities

[edit]

In January 2011, multiple vulnerabilities in Symantec products that could be exploited by a denial-of-service attack, and thereby compromise a system, were reported. The products involved were Symantec AntiVirus Corporate Edition Server and Symantec System Center.[105]

The November 12, 2012, Vulnerability Bulletin of the United States Computer Emergency Readiness Team (US-CERT) reported the following vulnerability for older versions of Symantec's Antivirus system: "The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine (SSE) before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file."[106]

The problem relates to older versions of the systems and a patch is available. US-CERT rated the seriousness of this vulnerability as a 9.7 on a 10-point scale. The "decomposer engine" is a component of the scanning system that opens containers, such as compressed files, so that the scanner can evaluate the files within.[citation needed]

Scareware lawsuit

[edit]

In January 2012, James Gross filed a lawsuit against Symantec for distributing fake scareware scanners that purportedly alerted users of issues with their computers. Gross claimed that after the scan, only some of the errors and problems were corrected, and he was prompted by the scanner to purchase a Symantec app to remove the rest. Gross claimed that he bought the app, but it did not speed up his computer or remove the detected viruses. He hired a digital forensics expert to back up this claim. Symantec denied the allegations and said that it would contest the case.[107] Symantec settled a $11 million fund (up to $9 to more than 1 million eligible customers representing the overpaid amount for the app) and the case was dismissed in court.[108][109]

Source code theft

[edit]

On January 17, 2012, Symantec disclosed that its network had been hacked. A hacker known as "Yama Tough" had obtained the source code for some Symantec software by hacking an Indian government server.[110] Yama Tough released parts of the code and threatened to release more. According to Chris Paden, a Symantec spokesman, the source code that was taken was for Enterprise products that were between five and six years old.[110]

On September 25, 2012, an affiliate of the hacker group Anonymous published source code from Norton Utilities.[111] Symantec confirmed that it was part of the code that had been stolen earlier, and that the leak included code for 2006 versions of Norton Utilities, pcAnywhere and Norton Antivirus.[111]

Verisign data breach

[edit]

In February 2012, it was reported that Verisign's network and data had been hacked repeatedly in 2010, but that the breaches had not been disclosed publicly until they were noted in an SEC filing in October 2011.[112] Verisign did not provide information about whether the breach included its certificate authority business, which was acquired by Symantec in late 2010.[112] Oliver Lavery, director of security and research for nCircle, asked rhetorically, "Can we trust any site using Verisign SSL certificates? Without more clarity, the logical answer is no."[113][114]

pcAnywhere exploit

[edit]

On February 17, 2012, details of an exploit of pcAnywhere were posted. The exploit would allow attackers to crash pcAnywhere on computers running Windows.[115] Symantec released a hotfix for the issue twelve days later.[116]

Hacking of The New York Times network

[edit]

According to Mandiant, Symantec security products used by The New York Times detected only one of 45 pieces of malware that were installed by Chinese hackers on the newspaper's network during three months in late 2012.[117][118] Symantec responded:

"Advanced attacks like the ones the New York Times described in the following article, <https://www.nytimes.com/2013/01/31/technology/chinese-hackers-infiltrate-new-york-times-computers.html>, underscore how important it is for companies, countries and consumers to make sure they are using the full capability of security solutions. The advanced capabilities in our [E]ndpoint offerings, including our unique reputation-based technology and behavior-based blocking, specifically target sophisticated attacks. Turning on only the signature-based anti-virus components of [E]ndpoint solutions alone [is] not enough in a world that is changing daily from attacks and threats. We encourage customers to be very aggressive in deploying solutions that offer a combined approach to security. Anti-virus software alone is not enough".[119]

Intellectual Ventures suit

[edit]

In February 2015, Symantec was found guilty of two counts of patent infringement in a suit by Intellectual Ventures Inc and ordered to pay $17 million in compensation and damages,[120] In September 2016, this decision was reversed on appeal by the Federal Circuit.[121][122]

Sustaining digital certificate security

[edit]

On September 18, 2015, Google notified Symantec that the latter issued 23 test certificates for five organizations, including Google and Opera, without the domain owners' knowledge.[123] Symantec performed another audit and announced that an additional 164 test certificates were mis-issued for 76 domains and 2,458 test certificates were mis-issued for domains that had never been registered. Google requested that Symantec update the public incident report with proven analysis explaining the details on each of the failures.[124]

The company was asked to report all the certificates issued to the Certificate Transparency log henceforth.[125][126] Symantec has since reported implementing Certificate Transparency for all its SSL Certificates. Above all, Google has insisted that Symantec execute a security audit by a third party and to maintain tamper-proof security audit logs.[125]

Google and Symantec clash on website security checks

[edit]

On March 24, 2017, Google stated that it had lost confidence in Symantec, after the latest incident of improper certificate issuance.[127][128] Google says millions of existing Symantec certificates will become untrusted in Google Chrome over the next 12 months. According to Google, Symantec partners issued at least 30,000 certificates of questionable validity over several years, but Symantec disputes that number.[129] Google said Symantec failed to comply with industry standards and could not provide audits showing the necessary documentation.[130][131]

Google's Ryan Sleevi said that Symantec partnered with other CAs (CrossCert (Korea Electronic Certificate Authority), Certisign Certificatadora Digital, Certsuperior S. de R. L. de C.V., and Certisur S.A.) who did not follow proper verification procedures leading to the misissuance of certificates.[132]

Following discussions in which Google had required that Symantec migrate Symantec-branded certificate issuance operations a non-Symantec-operated "Managed Partner Infrastructure",[133] a deal was announced whereby DigiCert acquired Symantec's website security business.[134] In September 2017, Google announced that starting with Chrome 66, "Chrome will remove trust in Symantec-issued certificates issued prior to June 1, 2016".[135] Google further stated that "by December 1, 2017, Symantec will transition issuance and operation of publicly-trusted certificates to DigiCert infrastructure, and certificates issued from the old Symantec infrastructure after this date will not be trusted in Chrome."[135] Google predicted that toward the end of October 2018, with the release of Chrome 70, the browser would omit all trust in Symantec's old infrastructure and all of the certificates it had issued, affecting most certificates chaining to Symantec roots.[135] Mozilla Firefox planned to distrust Symantec-issued certificates in Firefox 63 (released on October 23, 2018),[136] but delivered the change in Firefox 64 (released on December 11, 2018).[137] Apple has also planned to distrust Symantec root certificates.[138][139] Subsequently, Symantec exited the TLS/SSL segment by selling the SSL unit to Digicert for $950 million in mid 2017.[82]

Norton Crypto

[edit]

On July 20, 2021, Norton LifeLock released Norton Crypto, which would've mined Ethereum in the background in exchange for periodic payments.[140] This drew criticism from users, as this was installed automatically, and many users reported having diffuculty uninstalling the program.[141][142]

Columbia patent-infringement lawsuit

[edit]

In May 2022, Columbia University won $185 million judgement against NortonLifeLock Inc. in a patent-infringement lawsuit.[143] The jury found that Norton willfully infringed the patents related to antivirus fighting malware.[144][145]

Logos

[edit]

See also

[edit]

References

[edit]
[edit]
Revisions and contributorsEdit on WikipediaRead on Wikipedia
from Grokipedia
Gen Digital Inc. (NASDAQ: GEN) is a multinational cybersecurity company co-headquartered in Tempe, Arizona, United States, and Prague, Czech Republic, specializing in consumer software and services for cybersecurity, online privacy, identity protection, and financial wellness. The company operates under the mission of powering "Digital Freedom" by delivering innovative, user-friendly technologies that help individuals manage and secure their digital and financial lives. It reaches nearly 500 million users in more than 150 countries through a family of established brands, including Norton, Avast, LifeLock, MoneyLion, Avira, AVG, CCleaner, and ReputationDefender. Formed through the merger of NortonLifeLock and in September 2022, Gen Digital adopted its current name in November of that year to reflect its expanded focus on holistic digital safety solutions. The merger combined NortonLifeLock's legacy in antivirus and protection—stemming from its origins as a 2019 spin-off of Symantec Corporation's consumer business—with Avast's expertise in free and premium security tools, creating a unified entity valued for its scale and innovation in the cybersecurity market. As an company, Gen Digital emphasizes subscription-based models for its products, which include , VPN services, password managers, credit monitoring, and financial planning tools, all designed to address evolving threats in the digital landscape. Gen Digital's portfolio underscores its commitment to accessible digital security, with flagship offerings like Norton's comprehensive protection suites and LifeLock's identity restoration services leading in market adoption. Recent advancements include AI-enhanced features for threat detection and personalized financial insights, positioning the company as a key player in the growing consumer cybersecurity sector amid rising cyber risks. The firm's global reach and brand diversity enable it to adapt to regional needs, from privacy tools in to identity safeguards in , while maintaining a focus on ethical data practices and user empowerment.

Overview

Company profile

Gen Digital traces its roots to Symantec Corporation, founded in 1982 by Gary Hendrix as an artificial intelligence-focused software company. In 2019, following the sale of Symantec's enterprise security business to Broadcom for $10.7 billion, the remaining consumer-focused operations were restructured and renamed NortonLifeLock Inc. This entity specialized in consumer cybersecurity and identity protection solutions. In September 2022, NortonLifeLock completed its merger with Avast plc in an all-stock transaction valued at approximately $6.4 billion, leading to the rebranding of the combined company as Gen Digital Inc. later that year. As of , Gen Digital operates as a multinational dedicated to cybersecurity, online , identity protection, and financial wellness, serving nearly 500 million users across more than 150 countries. The company is publicly traded on the under the GEN and holds a position in 500 rankings. Its core offerings include consumer cybersecurity products such as Norton and , alongside identity theft protection via and financial wellness services through MoneyLion, which was acquired in April 2025 for approximately $1 billion to expand its digital safety portfolio. Gen Digital's fiscal year 2025 (ended March 31, 2025) generated record annual of $3.935 billion, reflecting a 4% increase year-over-year driven by strong performance in consumer cyber safety. In the subsequent fiscal year 2026, early quarters demonstrated accelerated growth attributed to the MoneyLion integration and heightened for cybersecurity solutions; Q1 revenue reached $1.257 billion (up 30%), and Q2 revenue hit $1.220 billion (up 25%), prompting the company to raise its full-year FY2026 guidance to $4.92–$4.97 billion. The company employs approximately 3,500 people globally, with dual headquarters in , and , . As of November 2025, Gen Digital's was approximately $16.2 billion.

Mission and operations

Gen Digital's mission is to create innovative and easy-to-use technology solutions that help people grow, manage, and secure their digital and financial lives, with a strong emphasis on , , and user empowerment to enable "Digital Freedom." This purpose drives the company's commitment to protecting users from evolving online threats while fostering confidence in digital interactions. The company's operations are built on key pillars, including subscription-based services that deliver ongoing protection through brands like Norton and , ensuring recurring access to features for a global user base. AI-driven threat detection forms a core component, leveraging and advanced analytics to identify and mitigate risks such as scams, , and in real time. Gen Digital invests significantly in global research and development, with centers in multiple countries including , to innovate and adapt to emerging cybersecurity challenges. Gen Digital's business model primarily focuses on sales through mobile apps, websites, and digital platforms, allowing users to subscribe easily for personalized protection plans. The company also forms strategic partnerships with retail and e-tail partners, including device manufacturers, to bundle security solutions with hardware purchases and expand reach. While consumer-oriented, the model retains some B2B elements through offerings, providing scalable cybersecurity to enterprises via cloud-based tools. In alignment with its mission, Gen Digital advances and (DEI) initiatives, as detailed in its 2025 Social Impact Report. efforts include a 12% reduction in , energy-efficient upgrades like charging stations, and partnerships with nonprofits for environmental conservation. DEI programs emphasize inclusion through diversity networks and sponsorships, such as the Women4Cyber Mentoring Program, which supported 870 women in cybersecurity across in 2025. The company also prioritizes ethical AI use in cybersecurity, advocating for guidelines on data ownership and responsible deployment to prevent misuse in threat detection and user protection.

History

Founding and early development (1982–1989)

Symantec Corporation was founded in April 1982 by Dr. Gary Hendrix, a expert in and , in the . Hendrix, who had previously worked on AI projects at Stanford University's Knowledge Systems Laboratory, established the company with initial funding from a grant to develop software tools for intelligent and database management. Initially, Symantec focused on applications rather than security, aiming to create programs that could process and query data on early personal computers. In 1984, Symantec was acquired by the smaller C&E Software Inc., a move that provided additional resources but led to the merger of the two entities under the Symantec name; the company was formally incorporated in that year to support its growing operations. This period marked Symantec's shift toward commercial personal computer software amid the rapid adoption of PCs and . The company's first major product, Q&A, a flat-file database management system designed for natural language queries on IBM-compatible PCs, was launched in 1985. Q&A allowed users to interact with data using English-like commands, generating $1.4 million in revenue in its debut year and establishing Symantec's early foothold in the PC software market. By the late 1980s, as computer viruses like the Brain virus emerged in and threatened the burgeoning ecosystem, Symantec began transitioning toward antivirus solutions to address the growing need for PC security tools. The company developed its initial anti-malware expertise through in-house efforts, culminating in the 1989 launch of Symantec AntiVirus for Macintosh (SAM), one of the earliest commercial antivirus programs for the Macintosh platform, which scanned for and repaired known threats. This innovation positioned Symantec as a pioneer in virus detection amid intense competition from nascent security needs in the personal computing era. Key milestones included achieving profitability by 1988 and going public on in 1989, raising capital to fuel further product development. Early challenges involved adapting AI roots to practical utility software while navigating the fragmented PC market dominated by emerging threats and limited hardware resources.

Growth through acquisitions (1990–1999)

In the early 1990s, Symantec pursued strategic acquisitions to expand its portfolio and enter emerging markets like antivirus protection. A landmark deal occurred in August 1990 when Symantec acquired Computing Inc. for approximately $104 million in stock, integrating the popular suite, which provided disk optimization and tools for systems. This acquisition not only bolstered Symantec's consumer software offerings but also positioned it as a leader in PC maintenance utilities, building on its foundational antivirus technology developed internally in the late . The move significantly enhanced Symantec's brand recognition and market share in the burgeoning personal computing sector. Throughout the mid-1990s, Symantec continued its acquisition strategy to diversify into productivity and backup solutions, aligning with the rise of Windows operating systems. In May 1993, the company acquired Contact Software International Inc., developers of ACT!, a leading contact management application, for about $45 million in cash and stock; this enhanced Symantec's productivity tools by adding capabilities popular among small businesses. Later that year, in October 1993, Symantec purchased Fifth Generation Systems Inc. for $53.8 million, gaining access to disk backup and encryption utilities like CleanSweep and Norton Backup, which complemented its existing security-focused products. Additional deals, such as the 1995 acquisition of Delrina Corporation for $42.2 million—which brought the widely used WinFax software into Symantec's lineup—further strengthened its position in communication and data management tools. These acquisitions allowed Symantec to rapidly integrate complementary technologies, reducing development time and expanding its addressable market. This period of acquisitive growth coincided with Symantec's adaptation to needs and Windows compatibility, driving substantial revenue expansion. From $75 million in fiscal year 1990 (ended March 31, 1990) to $644 million in fiscal year 1999 (ended March 31, 1999), the company's revenues more than quadrupled, fueled by the integration of acquired products into bundled suites like Norton SystemWorks and the increasing demand for antivirus solutions amid rising cyber threats. By the late , these efforts had transformed Symantec from a niche developer into a dominant player in consumer software, with acquisitions contributing over half of its product innovations during the decade.

Enterprise expansion (2000–2014)

During the early 2000s, Symantec increasingly shifted its focus toward enterprise solutions, building on its consumer antivirus roots to address the growing demands of business and security. This transition was marked by strategic acquisitions that expanded its portfolio into storage management, , and data protection. A pivotal move came in when Symantec acquired Software for $13.5 billion in an all-stock deal, integrating Veritas's leading backup, recovery, and storage resource management tools to create comprehensive enterprise data protection offerings. The merger, completed in July , positioned Symantec as one of the largest software companies globally, with combined annual revenues approaching $5 billion and a strengthened emphasis on serving large organizations. In 2007, Symantec further diversified its enterprise capabilities through two key acquisitions. It purchased for $830 million, gaining advanced IT systems management software that enabled automated endpoint management, software distribution, and asset tracking for corporate networks. Later that year, Symantec acquired Vontu for $350 million, incorporating prevention (DLP) technology to help enterprises monitor, protect, and recover sensitive information across networks, endpoints, and storage systems. These deals complemented the launch of (SEP) in September 2007, a unified platform combining antivirus, antispyware, firewall, and intrusion prevention features tailored for business environments, which became a cornerstone of Symantec's strategy. Symantec's enterprise push extended into cloud security as adoption of cloud services accelerated. In , the company acquired MessageLabs for $695 million, a provider of cloud-based and web security services, marking its entry into SaaS-delivered protection for enterprise messaging and . This was followed by the 2012 launch of the O3 security platform, which integrated intelligence from Symantec's to offer hybrid cloud workload protection, visibility, and compliance tools for businesses migrating to the cloud. By fiscal year 2014, these efforts contributed to Symantec's global revenue reaching $6.7 billion, with a growing proportion derived from (B2B) segments like and , reflecting a strategic pivot away from products. As part of refocusing on core security competencies, Symantec began preparations in late 2014 to separate its business, including , into a standalone entity. Announced in October 2014, the planned spin-off aimed to streamline operations and allow Symantec to concentrate on cybersecurity innovation for enterprises, with the separation ultimately completed in 2016. This restructuring underscored the company's evolution into a dedicated enterprise security leader during the period.

Consumer focus and spin-off (2015–2021)

In 2015, Symantec Corporation announced the separation of its enterprise information management business, , which it sold to for $8 billion, allowing the company to refocus on its core operations. This divestiture retained Symantec's consumer portfolio, including the Norton brand, while maintaining its enterprise offerings, marking a strategic shift toward streamlining operations amid competitive pressures in the cybersecurity market. The transaction, completed in , provided Symantec with approximately $7.5 billion in net proceeds, which were primarily used for share repurchases and debt reduction. Building on this consumer emphasis, Symantec acquired , a leading protection service, in February 2017 for $2.3 billion, integrating it to expand its offerings in personal cybersecurity. LifeLock's services, which monitor personal information, credit reports, and online activities to detect and respond to identity threats, complemented Norton's antivirus and device protection tools, creating a more holistic digital safety platform for individuals and families. This acquisition added over 4 million subscribers to Symantec's base and positioned the company to address growing concerns over data breaches and online fraud. By 2019, Symantec further divested its enterprise security business to Broadcom Inc. for $10.7 billion, a deal that closed on November 4, 2019, and enabled the company to fully pivot to consumer-focused operations. As part of the transaction, Symantec transferred the Symantec brand to Broadcom for enterprise use and rebranded itself as NortonLifeLock Inc., reflecting its integrated Norton security and identity protection capabilities. This move eliminated distractions from the enterprise segment, which had generated about $2.5 billion in annual revenue, and allowed NortonLifeLock to concentrate resources on consumer products such as protection, Norton Secure VPN (launched in 2017 for secure browsing), and Norton Family safety tools for and online monitoring. The consumer-centric strategy drove significant growth, with direct subscribers reaching approximately 21 million by early 2021, fueled by heightened demand for digital protection during the as and activities surged. NortonLifeLock reported accelerating additions, including a 2.8 million year-over-year increase in its fiscal fourth quarter ending July 31, 2021, amid broader market shifts toward personal cybersecurity solutions. This period solidified the company's position as a leader in consumer cyber safety, with revenue from subscriptions emphasizing proactive threat monitoring and privacy tools.

Rebranding and recent developments (2022–present)

In September 2022, NortonLifeLock completed its acquisition of for $8.6 billion, a move that significantly expanded its global cybersecurity footprint. This transaction, initially announced in August 2021, integrated 's advanced antivirus technologies with NortonLifeLock's identity protection services, fostering synergies in threat intelligence and user growth. Following the merger's closure on September 12, 2022, the company established dual headquarters in , and , , to leverage operational strengths from both regions. On November 7, 2022, NortonLifeLock rebranded to Gen Digital, unifying its portfolio under a new identity focused on "powering digital freedom" through brands like Norton, , , and . The merger created a combined user base of nearly 500 million across more than 150 countries, enabling enhanced AI-driven threat detection capabilities derived from Avast's network, which identifies and blocks threats in real time. These integrations improved proactive cybersecurity measures, such as AI-powered scam detection, positioning Gen Digital as a leader in consumer digital safety. In December 2024, Gen Digital announced its acquisition of MoneyLion, a platform offering financial wellness tools, for approximately $1 billion in cash at $82 per share. The deal, which closed on April 17, 2025, extended Gen's services beyond cybersecurity into personalized finance management, integrating identity protection with budgeting and lending features to address holistic digital risks. This strategic expansion diversified revenue streams amid rising cyber threats. Throughout 2025, Gen Digital's quarterly threat reports highlighted escalating risks, with data breach events rising nearly 21% in Q2 alone, driven by increased exposure of financial data and phishing attempts. Aggregating Q1 through Q3 data underscored a broader trend of AI-fueled scams and a 82% uptick in breach incidents by Q3, reinforcing demand for integrated solutions. Post-acquisition stock performance reflected market confidence, with shares trading around $25-26 by late 2025—up from $21-22 immediately after the Avast merger—and analysts projecting targets of $31-35 following record Q2 FY26 revenue growth of 25%.

Products and services

Cybersecurity solutions

Gen Digital's cybersecurity portfolio primarily revolves around its flagship brands—Norton, Avast, AVG, and Avira—offering a range of antivirus, , and protection tools designed to safeguard users across devices and online activities. These solutions emphasize multi-layered defenses against , , , and identity threats, with integrated features for real-time monitoring and user-friendly interfaces. The Norton suite serves as a of Gen Digital's offerings, providing comprehensive antivirus protection that detects and removes viruses, , , and on PCs, Macs, Android, and devices. It includes a secure VPN for encrypted , identity monitoring through integration to alert users of potential data breaches, and a for secure credential storage. Additional features such as Safe Web, which blocks malicious websites during , and Dark Web scanning, which continuously searches for exposed personal information, enhance proactive threat mitigation. plans also incorporate AI-powered Scam Protection, including the Genie AI-Powered Scam Detector, to identify online scams, suspicious texts, and videos in real time. Avast and AVG deliver accessible cybersecurity with free and paid tiers, focusing on removal, security inspection to detect unsafe networks, and browser cleanup to eliminate tracking and optimize performance. 's One product bundles all-in-one protection, combining award-winning antivirus with VPN, scam detection, and AI-powered guidance against advanced threats like and . AVG complements this with similar tools, including real-time file and web shields, webcam protection, and an enhanced firewall to prevent unauthorized access. Both brands support cross-platform use, emphasizing ease of deployment for individual and users. Avira specializes in mobile-focused security solutions, offering antivirus scanning for Android and to combat viruses, trojans, and , alongside a VPN with daily limits in free versions. Its toolkit extends to driver and software updates via an automated updater to patch vulnerabilities, and system optimization tools like Smart Scan, which identifies performance issues, privacy risks, and security gaps in one process. Avira Prime provides premium access to unlimited VPN , password management, and advanced protection, prioritizing lightweight, resource-efficient operation for everyday devices. CCleaner offers system optimization and tools, including junk file removal, registry cleaning, and software updater to enhance device performance and remove tracking data across Windows, Mac, and mobile platforms. It supports automated maintenance schedules for PCs and browsers, helping users maintain by clearing temporary files and cookies. ReputationDefender provides online services, enabling users to monitor, remove, or suppress unwanted personal information from search results and websites. It includes scans, content removal requests, and alerts for new mentions, focusing on protecting digital footprints and building positive online presence. Across these brands, Gen Digital leverages shared AI-powered real-time threat detection technologies to analyze behaviors and block emerging risks dynamically. In 2025, these systems contributed to blocking over 140,000 AI-generated malicious sites since January, highlighting their role in countering automated cyber threats like campaigns. This unified approach ensures scalable protection for nearly 500 million users worldwide, integrating seamlessly without delving into tools.

Financial wellness offerings

Gen Digital's financial wellness offerings primarily stem from its acquisition of MoneyLion in April 2025, which introduced a suite of tools designed to help users manage, grow, and protect their financial lives. MoneyLion's platform serves as a comprehensive for consumer , encompassing banking, investing, building, and advances. Key features include the RoarMoney account, a fee-free option that provides up to two days early direct deposits, contactless payments via , and cashback rewards through innovative tools like Shake 'N' Bank, where users earn up to $500 on qualifying purchases. Additionally, the platform offers managed investing options for portfolio growth, for improving scores without hard inquiries, and Instacash for instant access to up to $500 in 0% APR advances based on user eligibility. These elements are complemented by budgeting tools, personalized financial advice via AI-driven insights, and loan matching services that connect users to tailored borrowing opportunities. The integration of MoneyLion with Gen Digital's existing identity protection services creates synergies that link financial tools directly to enhanced security measures, such as real-time fraud alerts, comprehensive monitoring, and proactive prevention. For instance, users can now access MoneyLion's financial features alongside Gen's cybersecurity capabilities, enabling seamless monitoring of financial data against risks. This combined approach forms what Gen describes as the industry's first secure financial wellness platform, leveraging shared data to deliver personalized recommendations that safeguard both digital and monetary assets. Following the acquisition's completion on April 17, 2025, Gen has pursued aggressive strategies to its Norton and user bases, embedding MoneyLion features like Norton Money directly into existing installations to drive adoption. By November 2025, these efforts contributed to a 25% increase in the second fiscal quarter, prompting Gen to raise its full-year guidance to $4.97 billion, with synergies focused on data-driven financial security enhancements. For users, the offerings provide practical benefits amid rising financial scams, such as tools for , automated savings, and resources that educate on threats like PharmaFraud—fake online pharmacies that endanger health and finances through counterfeit drugs and data theft. This holistic support empowers consumers to build credit, match loans efficiently, and navigate economic uncertainties with integrated protection.

Corporate structure

Headquarters and global locations

Gen Digital maintains dual headquarters to support its transatlantic operations, with the primary U.S. facility located at 60 East Rio Salado Parkway, Suite 1000, in 85281, serving as the hub for executive leadership and financial functions. The company's European headquarters is situated at Pikrtova 1737/1A, 140 00 4, , functioning as the central base for product development and the integration of technologies following the 2022 acquisition. This structure reflects Gen Digital's commitment to bridging North American innovation with European regulatory compliance, particularly in data protection under EU frameworks. Beyond its headquarters, Gen Digital operates key offices that leverage regional expertise, including a legacy site in , at 487 East Middlefield Road, which supports ongoing research and development inherited from Symantec. In , the Pune office contributes to community initiatives. Additional significant locations include the London office at 100 New Bridge Street, , which aids post-Brexit operations and sales in the region. The company's global footprint spans more than 150 countries, enabling it to deliver services to nearly 500 million users worldwide through a of approximately 3,500 employees as of 2025. This extensive presence emphasizes U.S.-based innovation hubs like Tempe and Mountain View for strategic oversight, while the facility ensures alignment with data compliance standards, facilitating seamless integration and European market expansion.

Leadership and governance

Vincent Pilette has served as of Gen Digital since November 2019, guiding the company through its from NortonLifeLock in 2022 and subsequent expansions into financial wellness. Prior to his CEO role, Pilette joined Symantec as Executive Vice President and in May 2019, where he played a key part in the spin-off of consumer security assets that formed NortonLifeLock. His earlier includes senior finance positions at International, contributing over two decades of experience in technology and . Key executives supporting Pilette include Natalie Derse, who assumed the role of in 2023, overseeing financial planning, reporting, and strategy amid the company's growth. In technology , Sigurður (Siggi) Stefnisson serves as for Cyber Safety, having joined via the 2022 acquisition where he initially led Threat Labs; his expertise spans over 20 years in research and security engines. The , numbering eight members as of 2025, comprises a mix of cybersecurity veterans and financial experts, reflecting the integration of 's capabilities and the April 2025 acquisition of MoneyLion. Notable members include Pavel Baudis, co-founder and cybersecurity pioneer, providing deep technical insights, and Eric K. Brandt, retired Executive and of , offering financial acumen. Vincent Pilette also assumed the role of Board Chair in July 2025 following a transition. Gen Digital, listed on under the ticker GEN, adheres to exchange governance standards, including requirements and annual stockholder meetings. The , chaired by Eric K. Brandt and composed entirely of , oversees financial reporting, internal audits, and risks related to cybersecurity and data privacy, ensuring compliance with regulations like GDPR and CCPA. The company's 2025 Social Impact Report underscores diverse , supported by programs such as sponsorship of the Women4Cyber initiative for 870 participants in . Board policies emphasize ethical AI deployment and user as core strategic priorities, with guidelines mandating legal, transparent, and accountable AI use to mitigate risks while protecting consumer data across cybersecurity and . These policies, reviewed annually by the nominating and , align with the company's commitment to Digital Freedom and include human oversight for AI outputs to prevent biases or breaches.

Mergers and acquisitions

Key pre-2022 acquisitions

In 2005, Symantec Corporation, the predecessor to Gen Digital, acquired Software for $13.5 billion in a merger that combined Symantec's security expertise with 's leadership in backup, recovery, and storage management solutions. This deal, one of the largest in software history at the time, aimed to create a comprehensive enterprise and protection platform, though integration challenges persisted. Symantec later spun off the business in 2016 to a consortium led by for $7.4 billion, allowing the company to refocus on core security offerings. To bolster its consumer and small business security tools, Symantec acquired PC Tools in 2008, a provider of antivirus, anti-spyware, and PC utility software for Windows users. The acquisition enhanced Symantec's portfolio with user-friendly utilities like Spyware Doctor and Firewall Plus, though financial terms were not disclosed. In 2010, Symantec further strengthened its encryption capabilities by purchasing PGP Corporation for approximately $300 million in cash. PGP's data protection software, including Pretty Good Privacy tools, integrated into Symantec's endpoint security solutions to address growing needs for secure data transmission and storage. Symantec's 2016 acquisition of for $4.65 billion marked a significant expansion into web and cloud services. proxy appliances and secure web gateways complemented Symantec's offerings, forming a unified enterprise cybersecurity platform. This was followed in 2017 by the $2.3 billion acquisition of , an service with over 4 million subscribers. monitoring and restoration services accelerated Symantec's pivot toward consumer-focused identity , diversifying revenue beyond traditional antivirus. These pre-2022 acquisitions collectively drove Symantec's transition from enterprise-centric to a balanced consumer-enterprise model, adding billions in annual revenue and technological depth. However, by 2019, Symantec sold its enterprise security business—including assets from Blue Coat and PGP—to for $10.7 billion, enabling a sharper focus on consumer cybersecurity under the rebranded NortonLifeLock.

Avast integration

In 2021, NortonLifeLock Inc. announced its agreement to acquire plc in a transaction valued at up to $8.6 billion, structured as a mix of cash and stock options for Avast shareholders, with the cash alternative priced at 712 pence per share. The proposed merger, aimed at combining two major players in consumer cybersecurity, encountered significant regulatory challenges, particularly from the (), which launched a phase 2 investigation in March 2022 over potential reductions in competition for . Additional clearances were obtained from German antitrust authorities in 2022, and despite the extended review process, the approved the deal on September 2, 2022, allowing the transaction to close on September 12, 2022, after which NortonLifeLock rebranded as Gen Digital Inc. Post-closure integration efforts focused on merging operations to enhance efficiency and innovation, including the consolidation of teams across the two entities to streamline product development in areas like threat detection and privacy tools. Gen Digital undertook user migration to unified digital platforms, enabling cross-brand access to enhanced features while preserving core product identities such as Norton and . These initiatives are projected to yield annual pre-tax cost synergies of $280 million at full run-rate, primarily from optimizations in , facilities, , and administrative functions, with about 60% of savings anticipated by the end of the first full year post-merger. To address cultural integration, Gen Digital adopted a dual-headquarters structure with primary locations in , , and , , the latter serving as Avast's longstanding base and supporting continued EU-focused operations and talent retention. This approach helped mitigate potential disruptions from the cross-Atlantic merger. The integration has resulted in a combined global user base exceeding 500 million, providing greater scale for cybersecurity advancements, particularly by incorporating Avast's established expertise in mobile protection to strengthen Gen Digital's offerings against evolving mobile threats.

MoneyLion acquisition

On December 10, 2024, Gen Digital announced its acquisition of MoneyLion, a company, for approximately $1 billion, consisting of $82 per share in cash plus potential valued at up to $23 per share in Gen Digital stock based on post-closing performance milestones. The deal received shareholder approval on April 10, 2025, and closed on April 17, 2025, after obtaining necessary regulatory clearances. The strategic rationale centered on diversifying Gen Digital's portfolio beyond cybersecurity into financial wellness, enabling cross-selling opportunities to its existing user base to deliver a holistic "Digital Freedom" experience that combines , , identity , and . By integrating MoneyLion's , investing, and tools, Gen Digital aimed to address consumers' comprehensive digital needs, leveraging synergies to enhance user engagement and retention. Post-acquisition integration focused on linking Gen Digital's cybersecurity APIs with MoneyLion's banking services for advanced detection, allowing real-time monitoring and prevention of financial threats. Data synergies were emphasized to enable personalized alerts, drawing on cybersecurity insights like patterns to deliver tailored financial recommendations and risk notifications to users. The acquisition added over 18 million MoneyLion customers to Gen Digital's ecosystem, broadening its direct user base and expanding opportunities for cross-platform adoption. In fiscal year 2026 filings, Gen Digital projected the deal to contribute to a revenue jump of approximately 20%, with Q2 FY2026 revenue reaching $1.22 billion, up 25% year-over-year, partly driven by MoneyLion's 50% growth and overall guidance raised to $4.8–$4.9 billion.

Controversies and security issues

Historical vulnerabilities and breaches

In the mid-2000s, Symantec's antivirus products faced several vulnerabilities that allowed attackers to bypass scanning mechanisms. For instance, in Norton Internet Security 2006, a security bypass vulnerability in the COM object enabled local attackers to circumvent protection features without authentication, potentially allowing execution. This issue highlighted early flaws in the software's access controls, which could be exploited to evade real-time scanning. By 2007, Symantec AntiVirus Corporate Edition encountered a local vulnerability due to improper privilege dropping in the real-time scanner process. An attacker with local access could exploit this flaw in rtvscan.exe to elevate privileges from a low-level user to , enabling full control over the affected system. This vulnerability affected multiple versions and underscored risks in endpoint protection components that would later evolve into . Related class-action lawsuits later alleged inadequate disclosure of such flaws. Throughout the 2000s, Symantec antivirus solutions were also susceptible to denial-of-service (DoS) vulnerabilities that could crash scanning processes. A notable example occurred in with the component in products like Symantec Client Security and Symantec AntiVirus Corporate Edition 10.x, where crafted archives triggered infinite loops, consuming excessive CPU resources and halting protection. Similar DoS issues appeared in earlier versions, such as buffer overflows in file decompression routines that allowed remote attackers to cause application crashes via malformed files. These exploits disrupted antivirus functionality without requiring , exposing users to unmitigated threats during outages. In 2010, —whose SSL certificate business was acquired by Symantec later that year—suffered multiple network intrusions by hackers, resulting in the theft of unspecified data from corporate systems. Although and Symantec maintained that no operational integrity of DNS or acquired SSL products was compromised, the breaches raised significant concerns about potential exposure of sensitive certificate-related information, affecting trust in SSL protections for millions of websites secured by -issued certificates prior to the acquisition. The pcAnywhere remote access tool faced a critical zero-day vulnerability in 2012, identified as a remote code execution flaw in the awhost32.exe component. This buffer overflow allowed unauthenticated remote attackers to execute arbitrary code on vulnerable installations, particularly versions 12.5 and earlier, by sending specially crafted packets over the network. The issue gained notoriety when combined with the public leak of pcAnywhere's source code from a prior 2006 breach, enabling widespread exploitation attempts by hackers. Symantec urged immediate patching, as unmitigated systems risked full compromise. In 2013, the Trustees of filed a lawsuit against Symantec Corporation in the U.S. District Court for the Eastern District of , alleging that Symantec's antivirus and security software products, including Norton, infringed five patents related to detection and blocking technologies developed at the university. The case involved claims of willful infringement and additional state counts for fraudulent concealment and . After years of litigation, including appeals to the Federal Circuit that affirmed non-infringement for some patents but revived others, a in 2022 found NortonLifeLock Inc.—Symantec's successor—liable for willfully infringing two patents, awarding Columbia $185,112,727 in damages. In October 2023, the district court enhanced the damages to approximately $481 million due to willfulness, though the case remains under appeal as of 2025. Symantec also faced a protracted patent dispute with Intellectual Ventures I LLC and Intellectual Ventures II LLC, entities known for acquiring and asserting patents in what critics describe as troll-like litigation. The suit, filed in 2010 in the U.S. District Court for the District of Delaware, accused Symantec of infringing s covering data protection, email filtering, and antivirus scanning methods. In 2017, the court invalidated one key asserted (U.S. Patent No. 6,813,719) under the Alice Corp. v. CLS Bank framework for claiming ineligible abstract ideas, dismissing related infringement claims. Subsequent rulings yielded mixed results: some s were deemed invalid under Section 101, while a jury in 2015 found infringement of another (U.S. Patent No. 5,987,610) on antivirus technology, leading to an $8 million damages award. However, the Federal Circuit vacated this award in 2016, finding the '610 ineligible under 35 U.S.C. § 101. A 2006 security breach at Symantec resulted in the theft of source code for products including Norton Antivirus Corporate Edition 2006 and Symantec AntiVirus Corporate Edition 2006, an incident publicly disclosed in 2012 after hackers from the group Lords of Dharmaraja released portions online. The breach prompted a class action lawsuit filed in 2012 in California federal court, claiming Symantec concealed the compromise from customers, which allegedly rendered the software vulnerable and exposed user data. In 2013, U.S. District Judge Lucy Koh dismissed the suit with prejudice, ruling that plaintiffs could not prove actual harm or reliance on Symantec's statements about product security. In 2012, Washington resident James Gross initiated a proposed in U.S. District Court for the Northern District of against Symantec and its subsidiary PC Tools, alleging that products like , Registry Mechanic, and Performance Toolkit constituted "scareware" by generating false alerts about nonexistent system issues to upsell paid versions. The complaint accused the company of unfair competition, , and violating laws, seeking at least $5 million in damages. Symantec contested the claims, asserting the software's legitimacy based on third-party testing, but the case was dismissed with prejudice in July 2012.

Recent regulatory scrutiny

In 2022, the acquisition of by NortonLifeLock (subsequently rebranded as Gen Digital) faced regulatory review from the UK's (CMA), which initiated a Phase 2 investigation due to concerns about potential market dominance in consumer cybersecurity software. The probe examined overlaps in antivirus and privacy tools but ultimately cleared the £6.2 billion deal unconditionally in September 2022, determining it would not substantially lessen competition. Post-acquisition, Gen Digital encountered significant U.S. regulatory action regarding Avast's historical data practices. In February 2024, the (FTC) charged with deceiving consumers by selling detailed web browsing data collected via its free for purposes from 2014 to 2020, violating Section 5 of the FTC Act on unfair and deceptive practices. The settlement, finalized in June 2024, required to pay $16.5 million in redress and imposed a decade-long ban on selling or licensing browsing data for ads, with ongoing monitoring and deletion of collected data. Refunds to affected U.S. consumers began processing in early 2025, highlighting heightened scrutiny on data privacy in cybersecurity firms. Regarding European operations, Gen Digital has emphasized GDPR compliance through investments in data protection infrastructure following the Avast integration, including enhanced EU-based data centers in to localize processing and mitigate cross-border transfer risks. From 2023 to 2025, the company avoided fines in GDPR audits by strengthening privacy governance, as detailed in its annual social impact reports, which outline regular internal reviews and third-party supplier compliance with EU data laws. The 2025 acquisition of MoneyLion, completed in April for approximately $1 billion, drew attention from regulators on data implications in integrating with cybersecurity offerings. The FTC conducted a standard Hart-Scott-Rodino review, focusing on consumer data handling in , and cleared the deal without conditions, enabling Gen Digital to expand identity protection into financial wellness. This integration aligns with broader U.S. enforcement trends on in digital finance. In its 2025 SEC filings, Gen Digital disclosed risks related to AI ethics in cybersecurity threat reporting, including potential biases in AI-driven detection tools and compliance with emerging regulations on prevention amid rising AI-fueled fraud. The company highlighted proactive measures, such as ethical AI guidelines in product development, to address regulatory expectations under frameworks like the FTC's AI guidelines and evolving U.S. disclosure rules.

References

Add your contribution
Related Hubs
Contribute something
User Avatar
No comments yet.