Estimating the market impact of security breach announcements on firm values

Authors:
Sanjay Goel;Hany A. Shawky
Affiliations:
School of Business, University at Albany, SUNY, United States;School of Business, University at Albany, SUNY, United States
Venue:
Information and Management
Year:
2009

Citing 7
Cited 10

The economics of information security investment

ACM Transactions on Information and System Security (TISSEC)
The economic cost of publicly announced information security breaches: empirical evidence from the stock market

Journal of Computer Security - IFIP 2000
The IS risk analysis based on a business model

Information and Management
Why there aren't more information security research studies

Information and Management
The Effect of Internet Security Breach Announcements on Market Value: Capital Market Reactions for Breached Firms and Internet Security Developers

International Journal of Electronic Commerce
Threats and countermeasures for information system security: A cross-industry study

Information and Management
An Empirical Analysis of the Impact of Software Vulnerability Announcements on Firm Stock Price

IEEE Transactions on Software Engineering

Falling in love with online games: The uses and gratifications perspective

Computers in Human Behavior
Cyberwarfare: connecting the dots in cyber intelligence

Communications of the ACM
Out of fear or desire? Toward a better understanding of employees' motivation to follow IS security policies

Information and Management
Predicting stock market returns from malicious attacks: A comparative analysis of vector autoregression and time-delayed neural networks

Decision Support Systems
The impact of Business Intelligence systems on stock return volatility

Information and Management
Secure federation of semantic information services

Decision Support Systems
Simplicity is Bliss: Controlling Extraneous Cognitive Load in Online Security Training to Promote Secure Behavior

Journal of Organizational and End User Computing
A novel approach to evaluate software vulnerability prioritization

Journal of Systems and Software
Simplicity is Bliss: Controlling Extraneous Cognitive Load in Online Security Training to Promote Secure Behavior

Journal of Organizational and End User Computing
Internal control framework for a compliant ERP system

Information and Management

Quantified Score

Hi-index	0.02

Visualization

Abstract

Security breaches can have a significant economic impact on a firm. With public disclosure laws passed, security breaches involving disclosure of private client information can both damage the firms' reputation and lead to fines by US government agencies. We examined the impact of security breaches of US firms, as measured by their impact on the firm's market value. Data on security breaches were collected over the period 2004-2008. Reports and news articles corresponding to these breaches were obtained from public sources. Using event-study methodology, we estimate the impact of security breaches on the market value of publicly traded firms. Daily stock returns for firms impacted were obtained. Our results indicated that, on average, the announcement of a corporate security breach had a negative impact of about 1% of the market value of the firm during the days surrounding the event.