Breached But Not Broken: How Attributional Information Shapes Shareholder Reactions to Firms Following Data Breaches

Xinran Wang (), Jiaju Yan (), Timothy P. Munyon () and T. Russell Crook ()
Additional contact information
Xinran Wang: The City University of New York
Jiaju Yan: Baylor University
Timothy P. Munyon: The University of Tennessee
T. Russell Crook: The University of Tennessee

Corporate Reputation Review, 2025, vol. 28, issue 1, No 5, 92 pages

Abstract: Abstract Data breaches are increasingly consequential for many business organizations. How firms address data breaches has substantial ethical and societal implications. However, there is still uncertainty regarding why certain organizations experience more severe consequences than others following data breaches and what actions firms can take to minimize the negative outcomes. To answer these questions, we leverage insights from the literature on crisis communication strategies and attribution theory to predict stock market reactions. We argue that those reactions, as reflected in shareholders’ responses following a breach, depend on the nature of attributional information and are contingent upon firms’ responses and media sentiment. Analyzing a sample of 287 data breach events in 95 publicly traded US firms over a decade, we found that when shareholders attribute the data breach to internal and stable causes, the firm appears “broken,” resulting in a decline in stock market returns. However, our findings also indicate that firms’ ceremonial responses and media sentiment mitigate this negative relationship. Our discussion explores the benefits of understanding the role of crisis communication strategies and applying attribution theory within corporate-level studies. We also suggest potential avenues for future research.

Keywords: Attribution; Data breach; Shareholders’ reaction; Crisis communication strategy (search for similar items in EconPapers)
Date: 2025
References: View references in EconPapers View complete reference list from CitEc
Citations:

Downloads: (external link)
http://link.springer.com/10.1057/s41299-024-00179-1 Abstract (text/html)
Access to the full text of the articles in this series is restricted.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:pal:crepre:v:28:y:2025:i:1:d:10.1057_s41299-024-00179-1

Ordering information: This journal article can be ordered from
https://www.palgrave.com/gp/journal/41299

DOI: 10.1057/s41299-024-00179-1

Access Statistics for this article

Corporate Reputation Review is currently edited by Guido Berens

More articles in Corporate Reputation Review from Palgrave Macmillan
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().