Do Data Breaches Damage Reputation? Evidence from 43 Companies Between 2002 and 2018
16 Pages Posted: 5 Jun 2020
Date Written: May 9, 2020
While data breaches have become more common, there is little evidence that companies experiencing them experience a persistent decline in financial performance or security prices. Using new firm-level data between 2002 and 2018, this paper finds that firms experience a 13-22% increase in intangible capital following an average data breach. However, the largest and most salient breaches are associated with a 14-18% decline in intangible capital following a data breach. These effects are concentrated among firms in consumer-facing industries: smaller (larger) data breaches are associated with more positive (negative) effects on intangible capital. These results suggest that current regulatory guidance does not provide an incentive for firms to invest in cyber-security capabilities.
Keywords: Brand, Cyber-security, Data Breach, Intangible Capital, Reputation
JEL Classification: D91, G41, H56, L21
Suggested Citation: Suggested Citation