What is the Impact of Successful Cyberattacks on Target Firms?

59 Pages Posted: 20 Mar 2018

See all articles by Shinichi Kamiya

Shinichi Kamiya

Nanyang Technological University (NTU) - Nanyang Business School

Jun-Koo Kang

Nanyang Technological University (NTU) - Nanyang Business School

Jungmin Kim

School of Accounting and Finance, Hong Kong Polytechnic University

Andreas Milidonis

University of Cyprus - Department of Accounting and Finance

René Stulz

Ohio State University (OSU) - Fisher College of Business

Multiple version iconThere are 2 versions of this paper

Date Written: March 2018

Abstract

We examine which firms are targets of cyberattacks and how they are affected. We find that cyberattacks cause firms to reassess the risks that they are exposed to and their consequences, so that they have real effects on firm policies even when targets are not financially constrained. Cyberattacks are more likely to occur at more visible firms, firms with more intangible assets, and firms with less board attention to risk management. Attacks where personal financial information is appropriated are associated with a negative stock-market reaction, a decrease in sales growth for large firms and retail firms, an increase in leverage, a deterioration in financial health, and a decrease in investment in the short run. Firms further respond to cyberattacks by reducing CEO bonuses and risk-taking incentives and by strengthening their risk management.

Institutional subscribers to the NBER working paper series, and residents of developing countries may download this paper without additional charge at www.nber.org.

Suggested Citation

Kamiya, Shinichi and Kang, Jun-Koo and Kim, Jungmin and Milidonis, Andreas and Stulz, René, What is the Impact of Successful Cyberattacks on Target Firms? (March 2018). NBER Working Paper No. w24409. Available at SSRN: https://ssrn.com/abstract=3143314

Shinichi Kamiya (Contact Author)

Nanyang Technological University (NTU) - Nanyang Business School ( email )

Singapore, 639798
Singapore

Jun-Koo Kang

Nanyang Technological University (NTU) - Nanyang Business School ( email )

Nanyang Avenue, Block S3-01b-54
Singapore, 639798
Singapore
(+65) 6790-5662 (Phone)
(+65) 6791-3697 (Fax)

HOME PAGE: http://www.nbs.ntu.edu.sg/nbs_corporate/divisions/bnf/index.asp

Jungmin Kim

School of Accounting and Finance, Hong Kong Polytechnic University ( email )

M757 Li Ka Shing Tower
Hung Hom, Kowloon
Hong Kong
852 2766 7061 (Phone)

Andreas Milidonis

University of Cyprus - Department of Accounting and Finance ( email )

P.O. Box 20537
Nicosia CY-1678
Cyprus
+357 22 893 626 (Phone)

HOME PAGE: http://www.ucy.ac.cy/~amilidon/

René Stulz

Ohio State University (OSU) - Fisher College of Business ( email )

2100 Neil Avenue
Columbus, OH 43210-1144
United States

Register to save articles to
your library

Register

Paper statistics

Downloads
18
Abstract Views
181
PlumX Metrics
!

Under construction: SSRN citations while be offline until July when we will launch a brand new and improved citations service, check here for more details.

For more information