Key Takeaways
- • Thoma Bravo-backed Sophos is exploring a private credit refinancing solution for approximately $2.5–$2.6 billion in senior secured debt maturing within the next year, with a $2.5 billion term loan due March 2027 and a $92.5 million revolving credit facility due December 2026.
- • Sophos faces elevated refinancing pressure following a March 2026 downgrade by Moody's from B2 to B3, driven by near-term maturities coming current and weaker-than-expected operating performance; leverage is projected to increase toward 9x in fiscal year 2026 from 6.3x in FY 2025.
- • The cybersecurity company is in early-stage discussions with private credit providers and may simultaneously test the syndicated loan markets before finalizing any refinancing structure; existing lenders remain a potential fallback option.
- • Major business development company and CLO creditors holding Sophos' first lien debt include Blackstone, Blue Owl, and HPS, indicating a diversified creditor base that could participate in or influence any restructuring outcome.
- • Sophos' existing SOFR+350 basis points term loan due 2027 was trading at 96.5/97.5 as of the reporting date, signaling market stress and potential recovery concerns among secondary market participants.
Summary
Thoma Bravo-backed Sophos, the U.K.-based cybersecurity firm acquired by the Chicago private equity giant in a 2020 take-private transaction valued at $3.9 billion, is actively gauging interest in a private credit refinancing for its near-term debt obligations. According to sources, the company is exploring a private credit solution for approximately $2.5–$2.6 billion in senior secured debt maturities, with particular urgency around a $2.5 billion term loan B due in March 2027 and a $92.5 million revolving credit facility maturing in December 2026. The discussions remain in early stages, and Sophos retains flexibility to pursue alternative refinancing channels, including amendments or extensions with existing lenders or a return to the syndicated loan markets.
The urgency of Sophos' refinancing efforts was heightened by a March 2026 downgrade from Moody's Ratings, which reduced the company's credit rating from B2 to B3. The downgrade reflected both the proximity of debt maturities moving into current status and weaker-than-expected operating performance. Moody's projects that Sophos' leverage will increase materially to approximately 9x in fiscal year 2026, up from 6.3x in the prior fiscal year. The company maintains a $300 million cash balance as of year-end 2025, providing a liquidity cushion but insufficient to address the full refinancing requirement independently. Market pricing reflects the credit stress: Sophos' existing SOFR+350 basis points 2027 term loan was trading at 96.5/97.5, and its Euribor+350 bps term loan B was at 96/98, both indicating secondary market concerns about recovery prospects.
The creditor base for Sophos' first lien debt includes prominent alternative investment firms, with Blackstone, Blue Owl, and HPS identified as business development company investors holding exposure to the credit. Additional exposure is distributed across CLO vehicles, broadening the potential constituency for any refinancing negotiations. The company's strategy appears to involve testing both private credit markets and traditional syndicated channels before committing to a final refinancing structure. Neither Sophos nor Thoma Bravo provided comment on the refinancing discussions. The outcome will be material for institutional creditors holding Sophos exposure and may influence the strategic trajectory of Thoma Bravo's broader cybersecurity investment portfolio, particularly given the firm's recent acquisition of Secureworks for $859 million in February 2025.
The urgency of Sophos' refinancing efforts was heightened by a March 2026 downgrade from Moody's Ratings, which reduced the company's credit rating from B2 to B3. The downgrade reflected both the proximity of debt maturities moving into current status and weaker-than-expected operating performance. Moody's projects that Sophos' leverage will increase materially to approximately 9x in fiscal year 2026, up from 6.3x in the prior fiscal year. The company maintains a $300 million cash balance as of year-end 2025, providing a liquidity cushion but insufficient to address the full refinancing requirement independently. Market pricing reflects the credit stress: Sophos' existing SOFR+350 basis points 2027 term loan was trading at 96.5/97.5, and its Euribor+350 bps term loan B was at 96/98, both indicating secondary market concerns about recovery prospects.
The creditor base for Sophos' first lien debt includes prominent alternative investment firms, with Blackstone, Blue Owl, and HPS identified as business development company investors holding exposure to the credit. Additional exposure is distributed across CLO vehicles, broadening the potential constituency for any refinancing negotiations. The company's strategy appears to involve testing both private credit markets and traditional syndicated channels before committing to a final refinancing structure. Neither Sophos nor Thoma Bravo provided comment on the refinancing discussions. The outcome will be material for institutional creditors holding Sophos exposure and may influence the strategic trajectory of Thoma Bravo's broader cybersecurity investment portfolio, particularly given the firm's recent acquisition of Secureworks for $859 million in February 2025.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.