IDEAS home Printed from https://ideas.repec.org/p/arx/papers/2402.04773.html
   My bibliography  Save this paper

Prioritizing Investments in Cybersecurity: Empirical Evidence from an Event Study on the Determinants of Cyberattack Costs

Author

Listed:
  • Daniel Celeny
  • Loic Mar'echal
  • Evgueni Rousselot
  • Alain Mermoud
  • Mathias Humbert

Abstract

Along with the increasing frequency and severity of cyber incidents, understanding their economic implications is paramount. In this context, listed firms' reactions to cyber incidents are compelling to study since they (i) are a good proxy to estimate the costs borne by other organizations, (ii) have a critical position in the economy, and (iii) have their financial information publicly available. We extract listed firms' cyber incident dates and characteristics from newswire headlines. We use an event study over 2012--2022, using a three-day window around events and standard benchmarks. We find that the magnitude of abnormal returns around cyber incidents is on par with previous studies using newswire or alternative data to identify cyber incidents. Conversely, as we adjust the standard errors accounting for event-induced variance and residual cross-correlation, we find that the previously claimed significance of abnormal returns vanishes. Given these results, we run a horse race of specifications, in which we test for the marginal effects of type of cyber incidents, target firm sector, periods, and their interactions. Data breaches are the most detrimental incident type with an average loss of -1.3\% or (USD -1.9 billion) over the last decade. The health sector is the most sensitive to cyber incidents, with an average loss of -5.21\% (or USD -1.2 billion), and even more so when these are data breaches. Instead, we cannot show any time-varying effect of cyber incidents or a specific effect of the type of news as had previously been advocated.

Suggested Citation

  • Daniel Celeny & Loic Mar'echal & Evgueni Rousselot & Alain Mermoud & Mathias Humbert, 2024. "Prioritizing Investments in Cybersecurity: Empirical Evidence from an Event Study on the Determinants of Cyberattack Costs," Papers 2402.04773, arXiv.org.
    • Handle: RePEc:arx:papers:2402.04773
    as

    Download full text from publisher

    File URL: http://arxiv.org/pdf/2402.04773
    File Function: Latest version
    Download Restriction: no
    ---><---

    References listed on IDEAS

    as
    1. Brown, Stephen J. & Warner, Jerold B., 1985. "Using daily stock returns : The case of event studies," Journal of Financial Economics, Elsevier, vol. 14(1), pages 3-31, March.
    2. Fama, Eugene F & French, Kenneth R, 1992. "The Cross-Section of Expected Stock Returns," Journal of Finance, American Finance Association, vol. 47(2), pages 427-465, June.
    3. Shleifer, Andrei & Vishny, Robert W, 1997. "The Limits of Arbitrage," Journal of Finance, American Finance Association, vol. 52(1), pages 35-55, March.
    4. Patell, Jm, 1976. "Corporate Forecasts Of Earnings Per Share And Stock-Price Behavior - Empirical Tests," Journal of Accounting Research, Wiley Blackwell, vol. 14(2), pages 246-276.
    5. Antoine Bouveret, 2018. "Cyber Risk for the Financial Sector: A Framework for Quantitative Assessment," IMF Working Papers 2018/143, International Monetary Fund.
    6. James W. Kolari & Seppo Pynnönen, 2010. "Event Study Testing with Cross-sectional Correlation of Abnormal Returns," The Review of Financial Studies, Society for Financial Studies, vol. 23(11), pages 3996-4025, November.
    7. Ball, R & Brown, P, 1968. "Empirical Evaluation Of Accounting Income Numbers," Journal of Accounting Research, Wiley Blackwell, vol. 6(2), pages 159-178.
    8. Tosun, Onur Kemal, 2021. "Cyber-attacks and stock market activity," International Review of Financial Analysis, Elsevier, vol. 76(C).
    9. Kamiya, Shinichi & Kang, Jun-Koo & Kim, Jungmin & Milidonis, Andreas & Stulz, René M., 2021. "Risk management, firm reputation, and the impact of successful cyberattacks on target firms," Journal of Financial Economics, Elsevier, vol. 139(3), pages 719-749.
    10. Salinger, Michael, 1992. "Standard Errors in Event Studies," Journal of Financial and Quantitative Analysis, Cambridge University Press, vol. 27(1), pages 39-53, March.
    11. Kolari, James W. & Pynnonen, Seppo, 2011. "Nonparametric rank tests for event studies," Journal of Empirical Finance, Elsevier, vol. 18(5), pages 953-971.
    12. Malatesta, Paul H., 1986. "Measuring Abnormal Performance: The Event Parameter Approach Using Joint Generalized Least Squares," Journal of Financial and Quantitative Analysis, Cambridge University Press, vol. 21(1), pages 27-38, March.
    13. Boehmer, Ekkehart & Masumeci, Jim & Poulsen, Annette B., 1991. "Event-study methodology under conditions of event-induced variance," Journal of Financial Economics, Elsevier, vol. 30(2), pages 253-272, December.
    14. Fama, Eugene F, et al, 1969. "The Adjustment of Stock Prices to New Information," International Economic Review, Department of Economics, University of Pennsylvania and Osaka University Institute of Social and Economic Research Association, vol. 10(1), pages 1-21, February.
    15. Lee, Sang H & Varela, Oscar, 1997. "An Investigation of Event Study Methodologies with Clustered Events and Event Day Uncertainty," Review of Quantitative Finance and Accounting, Springer, vol. 8(3), pages 211-228, May.
    16. Karafiath, Imre, 1994. "On the Efficiency of Least Squares Regression with Security Abnormal Returns as the Dependent Variable," Journal of Financial and Quantitative Analysis, Cambridge University Press, vol. 29(2), pages 279-300, June.
    17. Claire Lending & Kristina Minnick & Patrick J. Schorno, 2018. "Corporate Governance, Social Responsibility, and Data Breaches," The Financial Review, Eastern Finance Association, vol. 53(2), pages 413-455, May.
    18. Robert Savickas, 2003. "Event‐Induced Volatility and Tests for Abnormal Performance," Journal of Financial Research, Southern Finance Association;Southwestern Finance Association, vol. 26(2), pages 165-178, June.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Sebastien Bradley & Estelle Dauchy & Makoto Hasegawa, 2018. "Investor valuations of Japan’s adoption of a territorial tax regime: quantifying the direct and competitive effects of international tax reform," International Tax and Public Finance, Springer;International Institute of Public Finance, vol. 25(3), pages 581-630, June.
    2. Panayiotis C. Andreou & Christodoulos Louca & Christos S. Savva, 2016. "Short-horizon event study estimation with a STAR model and real contaminated events," Review of Quantitative Finance and Accounting, Springer, vol. 47(3), pages 673-697, October.
    3. Aktas, Nihat & de Bodt, Eric & Cousin, Jean-Gabriel, 2007. "Event studies with a contaminated estimation period," Journal of Corporate Finance, Elsevier, vol. 13(1), pages 129-145, March.
    4. Corrado, Charles J. & Truong, Cameron, 2008. "Conducting event studies with Asia-Pacific security market data," Pacific-Basin Finance Journal, Elsevier, vol. 16(5), pages 493-521, November.
    5. Ding, Li & Lam, Hugo K.S. & Cheng, T.C.E. & Zhou, Honggeng, 2018. "A review of short-term event studies in operations and supply chain management," International Journal of Production Economics, Elsevier, vol. 200(C), pages 329-342.
    6. Dionysia Dionysiou, 2015. "Choosing Among Alternative Long-Run Event-Study Techniques," Journal of Economic Surveys, Wiley Blackwell, vol. 29(1), pages 158-198, February.
    7. Ma, Richie Ruchuan & Xiong, Tao & Bao, Yukun, 2021. "The Russia-Saudi Arabia oil price war during the COVID-19 pandemic," Energy Economics, Elsevier, vol. 102(C).
    8. Gokhale, Jayendra & Brooks, Raymond M. & Tremblay, Victor J., 2014. "The effect on stockholder wealth of product recalls and government action: The case of Toyota's accelerator pedal recall," The Quarterly Review of Economics and Finance, Elsevier, vol. 54(4), pages 521-528.
    9. Mateev, Miroslav & Andonov, Kristiyan, 2018. "Do European bidders pay more in cross-border than in domestic acquisitions? New evidence from Continental Europe and the UK," Research in International Business and Finance, Elsevier, vol. 45(C), pages 529-556.
    10. Chang, C-L. & Hsu, S.-H. & McAleer, M.J., 2018. "An Event Study of Chinese Tourists to Taiwan," Econometric Institute Research Papers 2018-003/III, Erasmus University Rotterdam, Erasmus School of Economics (ESE), Econometric Institute.
    11. Andrieș, Alin Marius & Ongena, Steven & Sprincean, Nicu, 2021. "The COVID-19 Pandemic and Sovereign Bond Risk," The North American Journal of Economics and Finance, Elsevier, vol. 58(C).
    12. Oberndorfer, Ulrich & Schmidt, Peter & Wagner, Marcus & Ziegler, Andreas, 2013. "Does the stock market value the inclusion in a sustainability stock index? An event study analysis for German firms," Journal of Environmental Economics and Management, Elsevier, vol. 66(3), pages 497-509.
    13. Daniel Celeny & Loic Mar'echal, 2024. "Cyber risk and the cross-section of stock returns," Papers 2402.04775, arXiv.org, revised Mar 2024.
    14. David M. Goldberg & Jason K. Deane & Terry R. Rakes & Loren Paul Rees, 2022. "3D Printing Technology and the Market Value of the Firm," Information Systems Frontiers, Springer, vol. 24(4), pages 1379-1392, August.
    15. Jan Bartholdy & Dennis Olson & Paula Peare, 2007. "Conducting Event Studies on a Small Stock Exchange," The European Journal of Finance, Taylor & Francis Journals, vol. 13(3), pages 227-252.
    16. Chortareas, Georgios & Cipollini, Andrea & Eissa, Mohamed Abdelaziz, 2012. "Switching to floating exchange rates, devaluations, and stock returns in MENA countries," International Review of Financial Analysis, Elsevier, vol. 21(C), pages 119-127.
    17. Truzaar Dordi & Olaf Weber, 2019. "The Impact of Divestment Announcements on the Share Price of Fossil Fuel Stocks," Sustainability, MDPI, vol. 11(11), pages 1-20, June.
    18. Sabet, Amir H. & Agha, Mahmoud & Heaney, Richard, 2018. "Value of investment: Evidence from the oil and gas industry," Energy Economics, Elsevier, vol. 70(C), pages 190-204.
    19. Kakhkharov, Jakhongir & Bianchi, Robert J., 2022. "COVID-19 and policy responses: Early evidence in banks and FinTech stocks," Pacific-Basin Finance Journal, Elsevier, vol. 74(C).
    20. Paolo Maranzano & Matteo Maria Pelagatti, 2022. "Spatio-temporal Event Studies for Air Quality Assessment under Cross-sectional Dependence," Papers 2210.17529, arXiv.org.

    More about this item

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:arx:papers:2402.04773. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: arXiv administrators (email available below). General contact details of provider: http://arxiv.org/ .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.