Cyber-criminals are exploiting sensitive financial information generated during the M&A process, taking advantage of the increased attack surface during mergers.