← Back to All Insights

Medtech dealmaking has been active. PwC counted $97.6 billion in medtech deal value in 2025, a decade high, and $36.5 billion in the first half of 2026, running above the first half of 2025. Large transactions such as Boston Scientific's agreement to acquire Penumbra, announced in January 2026, sit alongside competitive processes for smaller assets, and competitive processes put pressure on diligence timelines.

A compressed timeline tends to cover what is quick to check and skip what takes time. What gets missed can surface after close as manufacturing bottlenecks, reimbursement changes, regulatory findings, cybersecurity liabilities or legal contingencies.

Why Acquirers Are Buying

Common deal rationales each carry a characteristic diligence challenge:

Each of these calls for diligence that goes past the data room summary.

What Compressed Diligence Can Miss

What a Compressed Review Usually CoversWhat It Can Miss
Regulatory status and timelinePostmarket obligations, complaint and adverse event trends
Manufacturing cost structureScalability limits and process capability when volume increases
Revenue and customer baseCustomer concentration and reimbursement risk
IP and patent landscapeFreedom-to-operate risk from competitor patents
Management team capabilityOrganizational fragility and key-person dependencies
Current financial performanceSustainability of growth and margin assumptions after acquisition
Payer relationshipsCoverage decision timelines and denial patterns
Cybersecurity postureLegacy vulnerabilities, compliance gaps and incident history

An Example of the Pattern (Illustrative)

A hypothetical: a device company shows it can manufacture 50,000 units a year, and the buyer's model assumes linear scaling to 200,000. If the process hits constraints well short of that, from equipment limits, supplier dependencies or change control requirements, the buyer may learn it only when post-close growth targets are missed.

Platform vs. Bolt-On: Different Diligence Depth

Medtech acquisitions are often grouped into platform acquisitions (buying a company to build a portfolio around) and bolt-on acquisitions (adding complementary products to an existing platform). They call for different depth:

Platform Acquisitions

When a buyer acquires a company as a platform for later acquisitions, the commercial strategy depends on it, so diligence needs to go deeper:

Bolt-On Acquisitions

When a buyer adds a complementary product to an existing sales force or manufacturing platform, diligence can be more focused:

The risk is that a platform deal gets bolt-on-length diligence, which leaves blind spots exactly where the commercial strategy depends most on the target.

Long-Tail Risks That Get Missed

Manufacturing Scalability

Some companies that manufacture reliably at their current scale hit constraints when volume rises. Finding them takes process engineering analysis, not only cost accounting, and a short review may not get that far; see our manufacturing due diligence questions.

Reimbursement Changes

A device can be profitable in a niche because payment is favorable for a small patient population. As use grows, payers may revisit coverage or payment. Seeing that risk takes coverage-policy and payer-level analysis, not only historical revenue; see our reimbursement red flags.

Postmarket Obligations

Device manufacturers must report certain adverse events to FDA, generally within 30 calendar days of becoming aware of them (21 CFR 803.50), and FDA can order postmarket surveillance of certain Class II and Class III devices under section 522 of the Federal Food, Drug, and Cosmetic Act. A target's complaint history, adverse event reports, recalls and any open postmarket study obligations can mean higher compliance costs than a quick review assumes.

Cybersecurity

For connected devices, section 524B of the Federal Food, Drug, and Cosmetic Act makes cybersecurity documentation part of premarket submissions for cyber devices, and postmarket vulnerability management is an ongoing obligation. A surface-level review can miss unsupported software components or unpatched vulnerabilities; see our cybersecurity article.

Contingent Liabilities

Regulatory, legal and product liability contingencies can be partly disclosed or not disclosed at all, and a short timeline limits how far legal diligence can go. Warning letters, recalls and litigation are among the items worth checking against public records; see verifying medtech claims against the public record.

The Second-Opinion Model

One way to protect quality on a tight timeline is a second-opinion model:

This adds time, but for a large acquisition a short extension to examine the highest-risk areas can cost far less than a post-close surprise; see clinical and engineering risk in medtech deals.

Where Vantage Fits

Vantage's M&A Report ($25,000, within 48 hours of a complete intake) is built for this: diligence reviewed by a physician and a biomedical engineer, with each factual claim cited to its source, plus integration risk and reference-contact review and a 60-minute strategy session. It reads a target's manufacturing, regulatory and reimbursement record alongside the deal materials.

References

  1. MedTech Dive. "Medtech M&A maintains momentum following decade-high 2025: PwC." June 17, 2026. medtechdive.com
  2. Boston Scientific. "Boston Scientific announces agreement to acquire Penumbra, Inc." January 15, 2026. news.bostonscientific.com
  3. 21 CFR 803.50, "Individual adverse event reports; manufacturers." law.cornell.edu
  4. FDA. "522 Postmarket Surveillance Studies Program." fda.gov
  5. FDA. "Cybersecurity." Digital Health Center of Excellence. fda.gov