23 Pages Posted: 9 Apr 2012
Date Written: Spring 2010
Many companies face the risk of a data breach exposing stored personal information of customers and employees. The frequency of such incidents has been increasing over time and can result in significant costs for the affected firm. This article examines the stock market's assessment of the cost of data breaches at publicly traded companies in which personal information such as customer and/or employee data are exposed. Using event study methodology on a sample of 77 events between the beginning of 2004 and the end of 2006, we find that the overall effect of a data breach on shareholder wealth is negative and statistically significant. Based on a cross‐sectional analysis of the cumulative abnormal returns, we find a negative association between market reaction and firms that are less forthcoming about the details of the breach. We also find that firms with higher market‐to‐book ratios experience greater negative abnormal returns associated with a data breach. Further, we find that firm size and subsidiary status mitigate the negative effect of a data breach on the firm's stock price and that the negative market reaction to a data breach is more significant in the most recent time periods of the sample.
Suggested Citation: Suggested Citation
Gatzlaff, Kevin and McCullough, Kathleen A., The Effect of Data Breaches on Shareholder Wealth (Spring 2010). Risk Management and Insurance Review, Vol. 13, Issue 1, pp. 61-83, 2010. Available at SSRN: https://ssrn.com/abstract=2036897 or http://dx.doi.org/10.1111/j.1540-6296.2010.01178.x
By Jane Winn
This is a Wiley-Blackwell Publishing paper. Wiley-Blackwell Publishing charges $38.00 .
File name: j-6296.
If you wish to purchase the right to make copies of this paper for distribution to others, please select the quantity.