What Is the Impact of Successful Cyberattacks on Target Firms?

Shinichi Kamiya, Jun-Koo Kang, Jungmin Kim, Andreas Milidonis () and René Stulz
Additional contact information
Shinichi Kamiya: Nanyang Technological University
Jun-Koo Kang: Nanyang Technological University
Jungmin Kim: Hong Kong Polytechnic University

Working Paper Series from Ohio State University, Charles A. Dice Center for Research in Financial Economics

Abstract: We examine which firms are targets of successful cyberattacks and how they are affected. We find that cyberattacks are more likely to occur at larger and more visible firms, more highly valued firms, firms with more intangible assets, and firms with less board attention to risk management. These attacks affect firms adversely when consumer financial information is appropriated, but seem to have little impact otherwise. Attacks where consumer financial information is appropriated are associated with a significant negative stock market reaction, an increase in leverage following greater debt issuance, a deterioration in credit ratings, and an increase in cash flow volatility. These attacks also affect sales growth adversely for large firms and firms in retail industries, and there is evidence that they decrease investment in the short run. Affected firms respond to such attacks by cutting the CEO's bonus as a fraction of total compensation, by reducing the risk-taking incentives of management, and by taking actions to strengthen their risk management. The evidence is consistent with cyberattacks increasing boards' assessment of target firm risk exposures and decreasing their risk appetite.

JEL-codes: G14 G32 G34 G35 (search for similar items in EconPapers)
Date: 2018-03
New Economics Papers: this item is included in nep-bec, nep-cfn and nep-rmg
References: Add references at CitEc
Citations: View citations in EconPapers (16)

Downloads: (external link)
https://papers.ssrn.com/sol3/Delivery.cfm/SSRN_ID3 ... ctid=3135514&mirid=1

Related works:
Working Paper: What is the Impact of Successful Cyberattacks on Target Firms? (2018)
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:ecl:ohidic:2018-04

Access Statistics for this paper

More papers in Working Paper Series from Ohio State University, Charles A. Dice Center for Research in Financial Economics Contact information at EDIRC.
Bibliographic data for series maintained by ().