Evaluating The Financial Impact of Data Breaches Involving Account Credentials

30 Pages Posted: 20 Sep 2021

See all articles by Scott Chu

Scott Chu

UBC Sauder School of Business

Date Written: September 18, 2021

Abstract

Authentication mechanisms are widely adopted by organizations as a means of securing and controlling access to information systems and their accompanying information. While account credentials in the form of text-based passwords have been employed as an authentication mechanism since the 1970s, some security experts have argued the password’s ineffectiveness. Passwords can either be the cause of a data breach or information that is compromised during a data breach. Our investigation examines the difference in annual firm profit, annual sales, and annual operating expenses between firms that experience an account credential data breach and firms that experience a non-account credential data breach. To conduct our investigation, we use data breach incident information from the Privacy Rights Clearinghouse website and financial data from the Standard & Poor’s Compustat database. In our panel dataset, we identify 89 data breach incidents that involved account credentials out of our total sample of 937 incidents from years 2005-2019. Overall, our results indicate that firms that experience an account credential data breach have lower annual profit and lower annual sales compared to firms that experience a non-account credential data breach. However, we do not find a statistically significant difference in average operating expenses. Our findings suggest that it would be worthwhile to focus information security efforts on improving identity and access management practices since incidents that involve account credentials may lead to more negative financial consequences.

Keywords: data breach, account credentials, authentication mechanism, passwords, information security, identity and access management, blockchain

Suggested Citation

Chu, Scott, Evaluating The Financial Impact of Data Breaches Involving Account Credentials (September 18, 2021). Available at SSRN: https://ssrn.com/abstract=3926497 or http://dx.doi.org/10.2139/ssrn.3926497

Scott Chu (Contact Author)

UBC Sauder School of Business ( email )

Vancouver
Canada

Do you have a job opening that you would like to promote on SSRN?

Paper statistics

Downloads
182
Abstract Views
436
rank
233,571
PlumX Metrics