IDEAS home Printed from https://ideas.repec.org/p/fip/fednsr/88465.html
   My bibliography  Save this paper

Pirates without Borders: The Propagation of Cyberattacks through Firms’ Supply Chains

Author

Abstract

We document the supply chain effects of the most damaging cyberattack in history. The disruptions propagated from the directly hit firms to their customers, causing a four-fold amplification of the initial drop in profits. These losses were larger for affected customers with fewer alternative suppliers. Internal liquidity buffers and increased borrowing, mainly through bank credit lines, helped firms navigate the shock. The cyberattack also led to persisting adjustments to the supply chain network, with affected customers more likely to create new relationships with alternative suppliers and terminate those with the directly hit firms.

Suggested Citation

  • Matteo Crosignani & Marco Macchiavelli & André F. Silva, 2020. "Pirates without Borders: The Propagation of Cyberattacks through Firms’ Supply Chains," Staff Reports 937, Federal Reserve Bank of New York.
    • Handle: RePEc:fip:fednsr:88465
    Note: Revised July 2021.
    as

    Download full text from publisher

    File URL: https://www.newyorkfed.org/medialibrary/media/research/staff_reports/sr937.pdf
    File Function: Full text
    Download Restriction: no
    File URL: https://www.newyorkfed.org/research/staff_reports/sr937.html
    File Function: Summary
    Download Restriction: no
    ---><---

    Other versions of this item:

    References listed on IDEAS

    as
    1. Vasco M Carvalho & Makoto Nirei & Yukiko U Saito & Alireza Tahbaz-Salehi, 2021. "Supply Chain Disruptions: Evidence from the Great East Japan Earthquake," The Quarterly Journal of Economics, President and Fellows of Harvard College, vol. 136(2), pages 1255-1321.
    2. Shinichi Kamiya & Jun-Koo Kang & Jungmin Kim & Andreas Milidonis & René M. Stulz, 2018. "What is the Impact of Successful Cyberattacks on Target Firms?," NBER Working Papers 24409, National Bureau of Economic Research, Inc.
    3. Pol Antràs & C. Fritz Foley, 2015. "Poultry in Motion: A Study of International Trade Finance Practices," Journal of Political Economy, University of Chicago Press, vol. 123(4), pages 853-901.
    4. Matthew Elliott & Benjamin Golub & Matthew V. Leduc, 2022. "Supply Network Formation and Fragility," American Economic Review, American Economic Association, vol. 112(8), pages 2701-2747, August.
    5. Michael Gofman & Gill Segal & Youchang Wu & Stijn Van Nieuwerburgh, 2020. "Production Networks and Stock Returns: The Role of Vertical Creative Destruction," The Review of Financial Studies, Society for Financial Studies, vol. 33(12), pages 5856-5905.
    6. Vasco M Carvalho & Makoto Nirei & Yukiko U Saito & Alireza Tahbaz-Salehi, 0. "Supply Chain Disruptions: Evidence from the Great East Japan Earthquake," The Quarterly Journal of Economics, Oxford University Press, vol. 136(2), pages 1255-1321.
    7. Rustam Jamilov & Hélène Rey & Ahmed Tahoun, 2021. "The Anatomy of Cyber Risk," NBER Working Papers 28906, National Bureau of Economic Research, Inc.
    8. Daron Acemoglu & Ufuk Akcigit & William Kerr, 2016. "Networks and the Macroeconomy: An Empirical Exploration," NBER Macroeconomics Annual, University of Chicago Press, vol. 30(1), pages 273-335.
    9. Jean-Noël Barrot & Julien Sauvagnat, 2016. "Input Specificity and the Propagation of Idiosyncratic Shocks in Production Networks," The Quarterly Journal of Economics, President and Fellows of Harvard College, vol. 131(3), pages 1543-1592.
    10. Federico Cingano & Francesco Manaresi & Enrico Sette, 2016. "Does Credit Crunch Investment Down? New Evidence on the Real Effects of the Bank-Lending Channel," The Review of Financial Studies, Society for Financial Studies, vol. 29(10), pages 2737-2773.
    11. Monica Martinez-Bravo & Andreas Stegmann, 2017. "In Vaccines We Trust? The Effects of the CIA's Vaccine Ruse on Immunization in Pakistan," Working Papers wp2017_1713, CEMFI, revised Jul 2018.
    12. Rustam Jamilov & Hélène Rey & Ahmed Tahoun, 2021. "The Anatomy of Cyber Risk," NBER Working Papers 28906, National Bureau of Economic Research, Inc.
    13. Daron Acemoglu & Alireza Tahbaz-Salehi, 2019. "Firms, Failures, and Fluctuations," 2019 Meeting Papers 1148, Society for Economic Dynamics.
    14. Alfaro, Laura & García-Santana, Manuel & Moral-Benito, Enrique, 2021. "On the direct and indirect real effects of credit supply shocks," Journal of Financial Economics, Elsevier, vol. 139(3), pages 895-921.
    15. Antonis Kotidis & Stacey L. Schreft, 2022. "Cyberattacks and Financial Stability: Evidence from a Natural Experiment," Finance and Economics Discussion Series 2022-025, Board of Governors of the Federal Reserve System (U.S.).
    16. Kamiya, Shinichi & Kang, Jun-Koo & Kim, Jungmin & Milidonis, Andreas & Stulz, René M., 2021. "Risk management, firm reputation, and the impact of successful cyberattacks on target firms," Journal of Financial Economics, Elsevier, vol. 139(3), pages 719-749.
    17. Christoph E. Boehm & Aaron Flaaen & Nitya Pandalai-Nayar, 2019. "Input Linkages and the Transmission of Shocks: Firm-Level Evidence from the 2011 Tōhoku Earthquake," The Review of Economics and Statistics, MIT Press, vol. 101(1), pages 60-75, March.
    18. Anil K. Kashyap & Anne Wetherilt, 2019. "Some Principles for Regulating Cyber Risk," AEA Papers and Proceedings, American Economic Association, vol. 109, pages 482-487, May.
    19. Eli Amir & Shai Levi & Tsafrir Livne, 2018. "Do firms underreport information on cyber-attacks? Evidence from capital markets," Review of Accounting Studies, Springer, vol. 23(3), pages 1177-1206, September.
    20. Gustavo S. Cortes & Thiago Christiano Silva & Bernardus F. N. Van Doornik, 2019. "Credit Shock Propagation in Firm Networks: evidence from government bank credit expansions," Working Papers Series 507, Central Bank of Brazil, Research Department.
    21. Cremer, Jacques, 1995. "Towards an economic theory of incentives in just-in-time manufacturing," European Economic Review, Elsevier, vol. 39(3-4), pages 432-439, April.
    22. Daniel Berger & William Easterly & Nathan Nunn & Shanker Satyanath, 2013. "Commercial Imperialism? Political Influence and Trade during the Cold War," American Economic Review, American Economic Association, vol. 103(2), pages 863-896, April.
    23. Eisenbach, Thomas M. & Kovner, Anna & Lee, Michael Junho, 2022. "Cyber risk and the U.S. financial system: A pre-mortem analysis," Journal of Financial Economics, Elsevier, vol. 145(3), pages 802-826.
    24. Monica Martinez-Bravo & Andreas Stegmann, 2022. "In Vaccines We Trust? The Effects of the CIA’s Vaccine Ruse on Immunization in Pakistan," Journal of the European Economic Association, European Economic Association, vol. 20(1), pages 150-186.
    25. Sebnem Kalemli-Ozcan & Bent Sørensen & Carolina Villegas-Sanchez & Vadym Volosovych & Sevcan Yesiltas, 2015. "How to Construct Nationally Representative Firm Level Data from the Orbis Global Database: New Facts on SMEs and Aggregate Implications for Industry Concentration," Tinbergen Institute Discussion Papers 15-110/IV, Tinbergen Institute, revised 25 Jan 2022.
    26. Aldasoro, Iñaki & Gambacorta, Leonardo & Giudici, Paolo & Leach, Thomas, 2022. "The drivers of cyber risk," Journal of Financial Stability, Elsevier, vol. 60(C).
    27. Priya Garg, 2020. "Cybersecurity breaches and cash holdings: Spillover effect," Financial Management, Financial Management Association International, vol. 49(2), pages 503-519, June.
    28. Jean-Noël Barrot, 2016. "Trade Credit and Industry Dynamics: Evidence from Trucking Firms," Journal of Finance, American Finance Association, vol. 71(5), pages 1975-2016, October.
    29. James R. Brown & Matthew T. Gustafson & Ivan T. Ivanov, 2021. "Weathering Cash Flow Shocks," Journal of Finance, American Finance Association, vol. 76(4), pages 1731-1772, August.
    30. Anna M. Costello, 2020. "Credit Market Disruptions and Liquidity Spillover Effects in the Supply Chain," Journal of Political Economy, University of Chicago Press, vol. 128(9), pages 3434-3468.
    31. Emanuel Kopp & Lincoln Kaffenberger & Christopher Wilson, 2017. "Cyber Risk, Market Failures, and Financial Stability," IMF Working Papers 2017/185, International Monetary Fund.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Martin Boyer & Martin Eling, 2023. "New advances on cyber risk and cyber insurance," The Geneva Papers on Risk and Insurance - Issues and Practice, Palgrave Macmillan;The Geneva Association, vol. 48(2), pages 267-274, April.
    2. Aldasoro, Iñaki & Gambacorta, Leonardo & Giudici, Paolo & Leach, Thomas, 2022. "The drivers of cyber risk," Journal of Financial Stability, Elsevier, vol. 60(C).
    3. Antonio De Vito & Martin Jacob & Dirk Schindler & Guosong Xu, 2023. "How Do Corporate Tax Hikes Affect Investment Allocation within Multinationals?," CESifo Working Paper Series 10272, CESifo.
    4. Joseph G. Haubrich, 2021. "Stress, Contagion, and Transmission: 2020 Financial Stability Conference," Economic Commentary, Federal Reserve Bank of Cleveland, vol. 2021(07), pages 1-5, March.
    5. Akey, Pat & Grégoire, Vincent & Martineau, Charles, 2021. "Price Revelation from Insider Trading: Evidence from Hacked Earnings News," SocArXiv qe6tu, Center for Open Science.
    6. Camelia Minoiu & Andrés Schneider & Min Wei, 2023. "Why Does the Yield Curve Predict GDP Growth? The Role of Banks," Finance and Economics Discussion Series 2023-049, Board of Governors of the Federal Reserve System (U.S.).
    7. Boot, Arnoud & Hoffmann, Peter & Laeven, Luc & Ratnovski, Lev, 2021. "Fintech: what’s old, what’s new?," Journal of Financial Stability, Elsevier, vol. 53(C).
    8. Jens Foerderer, 2023. "Should we trust web-scraped data?," Papers 2308.02231, arXiv.org.
    9. Tsvetanov, Tsvetan & Slaria, Srishti, 2021. "The effect of the Colonial Pipeline shutdown on gasoline prices," Economics Letters, Elsevier, vol. 209(C).
    10. Zhu, Ying & Huang, Ke, 2023. "Customers’ litigation risk and suppliers’ cash holding decision: From the perspective of risk contagion," Finance Research Letters, Elsevier, vol. 55(PB).

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Peydró, José-Luis & Jiménez, Gabriel & Kenan, Huremovic & Moral-Benito, Enrique & Vega-Redondo, Fernando, 2020. "Production and financial networks in interplay: Crisis evidence from supplier-customer and credit registers," CEPR Discussion Papers 15277, C.E.P.R. Discussion Papers.
    2. Alfaro, Laura & García-Santana, Manuel & Moral-Benito, Enrique, 2021. "On the direct and indirect real effects of credit supply shocks," Journal of Financial Economics, Elsevier, vol. 139(3), pages 895-921.
    3. ARATA Yoshiyuki & MIYAKAWA Daisuke, 2022. "Demand Shock Propagation Through an Input-output Network in Japan," Discussion papers 22027, Research Institute of Economy, Trade and Industry (RIETI).
    4. Julian Di Giovanni & Galina Hale, 2022. "Stock Market Spillovers via the Global Production Network: Transmission of U.S. Monetary Policy," Journal of Finance, American Finance Association, vol. 77(6), pages 3373-3421, December.
    5. Banu Demir & Beata Javorcik & Tomasz K. Michalski & Evren Ors, 2020. "Financial Constraints and propagation of shocks in production network," Discussion Papers 2020-23, University of Nottingham, GEP.
    6. Ernest Liu & Aleh Tsyvinski, 2021. "Dynamical Structure and Spectral Properties of Input-Output Networks," Working Papers 2021-13, Princeton University. Economics Department..
    7. Längle, Katharina & Xu, Ankai & Tian, Ruijie, 2021. "Assessing the supply chain effect of natural disasters: Evidence from Chinese manufacturers," WTO Staff Working Papers ERSD-2021-13, World Trade Organization (WTO), Economic Research and Statistics Division.
    8. Aldasoro, Iñaki & Gambacorta, Leonardo & Giudici, Paolo & Leach, Thomas, 2022. "The drivers of cyber risk," Journal of Financial Stability, Elsevier, vol. 60(C).
    9. Emmanuel Dhyne & Ayumu Ken Kikkawa & Glenn Magerman, 2022. "Imperfect Competition in Firm-to-Firm Trade," Journal of the European Economic Association, European Economic Association, vol. 20(5), pages 1933-1970.
    10. Nicole Branger & Patrick Konermann & Christoph Meinerding & Christian Schlag, 2021. "Equilibrium Asset Pricing in Directed Networks [Risk premia and term premia in general equilibrium]," Review of Finance, European Finance Association, vol. 25(3), pages 777-818.
    11. Kristina Barauskaite & Anh Dinh Minh Nguyen, 2021. "Direct and network effects of idiosyncratic TFP shocks," Empirical Economics, Springer, vol. 60(6), pages 2765-2793, June.
    12. Kristina Barauskaite & Anh D. M. Nguyen, 2022. "Intersectoral network‐based channel of aggregate TFP shocks," International Journal of Finance & Economics, John Wiley & Sons, Ltd., vol. 27(4), pages 3897-3910, October.
    13. Basile Grassi, 2017. "IO in I-O: Competition and Volatility in Input-Output Networks," 2017 Meeting Papers 1637, Society for Economic Dynamics.
    14. Dong, Feng & Wen, Yi, 2019. "Long and Plosser meet Bewley and Lucas," Journal of Monetary Economics, Elsevier, vol. 102(C), pages 70-92.
    15. Lee, Dongyeol, 2021. "Propagation of economic shocks through vertical and trade linkages in Korea: An empirical analysis," Japan and the World Economy, Elsevier, vol. 60(C).
    16. David Rezza Baqaee, 2018. "Cascading Failures in Production Networks," Econometrica, Econometric Society, vol. 86(5), pages 1819-1838, September.
    17. Ito, Keiko & Ikeuchi, Kenta & Criscuolo, Chiara & Timmis, Jonathan & Bergeaud, Antonin, 2023. "Global value chains and domestic innovation," Research Policy, Elsevier, vol. 52(3).
    18. Yuzuka Kashiwagi & Yasuyuki Todo & Petr Matous, 2021. "Propagation of economic shocks through global supply chains—Evidence from Hurricane Sandy," Review of International Economics, Wiley Blackwell, vol. 29(5), pages 1186-1220, November.
    19. Vasily Korovkin & Alexey Makarin, 2020. "Production Networks and War," Papers 2011.14756, arXiv.org, revised Aug 2022.
    20. Anand, Kartik & Duley, Chanelle & Gai, Prasanna, 2022. "Cybersecurity and financial stability," Discussion Papers 08/2022, Deutsche Bundesbank.

    More about this item

    Keywords

    cyberattacks; supply chains; bank credit;
    All these keywords.

    JEL classification:

    • E23 - Macroeconomics and Monetary Economics - - Consumption, Saving, Production, Employment, and Investment - - - Production
    • G21 - Financial Economics - - Financial Institutions and Services - - - Banks; Other Depository Institutions; Micro Finance Institutions; Mortgages
    • G23 - Financial Economics - - Financial Institutions and Services - - - Non-bank Financial Institutions; Financial Instruments; Institutional Investors
    • L14 - Industrial Organization - - Market Structure, Firm Strategy, and Market Performance - - - Transactional Relationships; Contracts and Reputation

    NEP fields

    This paper has been announced in the following NEP Reports:

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:fip:fednsr:88465. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Gabriella Bucciarelli (email available below). General contact details of provider: https://edirc.repec.org/data/frbnyus.html .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.