IDEAS home Printed from https://ideas.repec.org/a/eee/intfin/v97y2024ics1042443124001483.html

HACKED: Understanding the stock market response to cyberattacks

Author

Listed:
  • Akyildirim, Erdinc
  • Conlon, Thomas
  • Corbet, Shaen
  • Hou, Yang (Greg)

Abstract

Increasing levels of digitisation make firms more susceptible to cyberattacks and privacy violations. In this paper, we quantify the impact of cybercrime on company stock returns using a large international sample. On the day after the cyber event, stock returns are found to decrease by -0.24%, but the effect reverses in about two weeks. The magnitude of the decrease in the stock market is greatest for companies that have experienced reoccurring events and for breaches deemed to be most severe. We show that the extent of the stock market decline cannot be explained by national institutional and macroeconomic factors, and is related to company-specific characteristics, including size, volatility, credit ranking and asset volatility. The empirical results highlight important policy and regulatory issues, not least the need for cyber risk disclosure requirements.

Suggested Citation

  • Akyildirim, Erdinc & Conlon, Thomas & Corbet, Shaen & Hou, Yang (Greg), 2024. "HACKED: Understanding the stock market response to cyberattacks," Journal of International Financial Markets, Institutions and Money, Elsevier, vol. 97(C).
    • Handle: RePEc:eee:intfin:v:97:y:2024:i:c:s1042443124001483
    DOI: 10.1016/j.intfin.2024.102082
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S1042443124001483
    Download Restriction: Full text for ScienceDirect subscribers only
    File URL: https://libkey.io/10.1016/j.intfin.2024.102082?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to

    for a different version of it.

    References listed on IDEAS

    as
    1. Conlon, Thomas & Huan, Xing & Muckley, Cal B., 2024. "Does national culture influence malfeasance in banks around the world?," Journal of International Financial Markets, Institutions and Money, Elsevier, vol. 90(C).
    2. Rafael La Porta & Florencio Lopez‐De‐Silanes & Andrei Shleifer, 2006. "What Works in Securities Laws?," Journal of Finance, American Finance Association, vol. 61(1), pages 1-32, February.
    3. Nelson, Daniel B, 1991. "Conditional Heteroskedasticity in Asset Returns: A New Approach," Econometrica, Econometric Society, vol. 59(2), pages 347-370, March.
    4. Shinichi Kamiya & Jun-Koo Kang & Jungmin Kim & Andreas Milidonis & René M. Stulz, 2018. "What is the Impact of Successful Cyberattacks on Target Firms?," NBER Working Papers 24409, National Bureau of Economic Research, Inc.
    5. Gunther Capelle-Blancard & Aurélien Petit, 2019. "Every Little Helps? ESG News and Stock Market Reaction," Journal of Business Ethics, Springer, vol. 157(2), pages 543-565, June.
    6. Gillet, Roland & Hübner, Georges & Plunus, Séverine, 2010. "Operational risk and reputation in the financial industry," Journal of Banking & Finance, Elsevier, vol. 34(1), pages 224-235, January.
    7. Sturm, Philipp, 2013. "Operational and reputational risk in the European banking industry: The market reaction to operational risk events," Journal of Economic Behavior & Organization, Elsevier, vol. 85(C), pages 191-206.
    8. Wong, Jin Boon & Zhang, Qin, 2022. "Stock market reactions to adverse ESG disclosure via media channels," The British Accounting Review, Elsevier, vol. 54(1).
    9. Kontonikas, Alexandros & MacDonald, Ronald & Saggu, Aman, 2013. "Stock market reaction to fed funds rate surprises: State dependence and the financial crisis," Journal of Banking & Finance, Elsevier, vol. 37(11), pages 4025-4037.
    10. Cao, Hung & Phan, Hieu V. & Silveri, Sabatino, 2024. "Data breach disclosures and stock price crash risk: Evidence from data breach notification laws," International Review of Financial Analysis, Elsevier, vol. 93(C).
    11. Goel, Sanjay & Cagle, Seth & Shawky, Hany, 2017. "How vulnerable are international financial markets to terrorism? An empirical study based on terrorist incidents worldwide," Journal of Financial Stability, Elsevier, vol. 33(C), pages 120-132.
    12. Piccotti, Louis R. & Wang, Heng, 2023. "Informed trading in the options market surrounding data breaches," Global Finance Journal, Elsevier, vol. 56(C).
    13. Kumarasiri, Jayanthi & Gunasekarage, Abeyratna, 2017. "Risk regulation, community pressure and the use of management accounting in managing climate change risk: Australian evidence," The British Accounting Review, Elsevier, vol. 49(1), pages 25-38.
    14. Kyriazis, Nikolaos & Corbet, Shaen, 2024. "Evaluating the dynamic connectedness of financial assets and bank indices during black-swan events: A Quantile-VAR approach," Energy Economics, Elsevier, vol. 131(C).
    15. Christian Eckert & Nadine Gatzert & Madeline Schubert, 2023. "Analyzing spillover effects from data breaches to the US (cyber) insurance industry," The European Journal of Finance, Taylor & Francis Journals, vol. 29(6), pages 669-692, April.
    16. Iyer, Subramanian R. & Simkins, Betty J. & Wang, Heng, 2020. "Cyberattacks and impact on bond valuation," Finance Research Letters, Elsevier, vol. 33(C).
    17. Meegan, Andrew & Corbet, Shaen & Larkin, Charles & Lucey, Brian, 2021. "Does cryptocurrency pricing response to regulatory intervention depend on underlying blockchain architecture?," Journal of International Financial Markets, Institutions and Money, Elsevier, vol. 70(C).
    18. Bollerslev, Tim, 1986. "Generalized autoregressive conditional heteroskedasticity," Journal of Econometrics, Elsevier, vol. 31(3), pages 307-327, April.
    19. Jacoby, Gady & Liu, Mingzhi & Wang, Yefeng & Wu, Zhenyu & Zhang, Ying, 2019. "Corporate governance, external control, and environmental information transparency: Evidence from emerging markets," Journal of International Financial Markets, Institutions and Money, Elsevier, vol. 58(C), pages 269-283.
    20. Corbet, Shaen & Gurdgiev, Constantin, 2019. "What the hack: Systematic risk contagion from cyber events," International Review of Financial Analysis, Elsevier, vol. 65(C).
    21. Stephanie Lu Wang & Dan Li, 2019. "Responding to public disclosure of corporate social irresponsibility in host countries: Information control and ownership control," Journal of International Business Studies, Palgrave Macmillan;Academy of International Business, vol. 50(8), pages 1283-1309, October.
    22. Karen M. Hogan & Gerard T. Olson & Jackson D. Mills & Peter A. Zaleski, 2023. "An Analysis of Cyber Breaches and Effects on Shareholder Wealth," International Journal of the Economics of Business, Taylor & Francis Journals, vol. 30(1), pages 51-78, January.
    23. Akyildirim, Erdinc & Corbet, Shaen & Efthymiou, Marina & Guiomard, Cathal & O'Connell, John F. & Sensoy, Ahmet, 2020. "The financial market effects of international aviation disasters," International Review of Financial Analysis, Elsevier, vol. 69(C).
    24. Arin, K. Peren & Ciferri, Davide & Spagnolo, Nicola, 2008. "The price of terror: The effects of terrorism on stock market returns and volatility," Economics Letters, Elsevier, vol. 101(3), pages 164-167, December.
    25. Schiemann, Frank & Tietmeyer, Raphael, 2022. "ESG Controversies, ESG Disclosure and Analyst Forecast Accuracy," International Review of Financial Analysis, Elsevier, vol. 84(C).
    26. Moll, Jodie & Yigitbasioglu, Ogan, 2019. "The role of internet-related technologies in shaping the work of accountants: New directions for accounting research," The British Accounting Review, Elsevier, vol. 51(6).
    27. Lin, Zhaoxin & Sapp, Travis R.A. & Ulmer, Jackie Rees & Parsa, Rahul, 2020. "Insider trading ahead of cyber breach announcements," Journal of Financial Markets, Elsevier, vol. 50(C).
    28. Brandao-Marques, Luis & Gelos, Gaston & Melgar, Natalia, 2018. "Country transparency and the global transmission of financial shocks," Journal of Banking & Finance, Elsevier, vol. 96(C), pages 56-72.
    29. Tosun, Onur Kemal, 2021. "Cyber-attacks and stock market activity," International Review of Financial Analysis, Elsevier, vol. 76(C).
    30. Kamiya, Shinichi & Kang, Jun-Koo & Kim, Jungmin & Milidonis, Andreas & Stulz, René M., 2021. "Risk management, firm reputation, and the impact of successful cyberattacks on target firms," Journal of Financial Economics, Elsevier, vol. 139(3), pages 719-749.
    31. Corbet, Shaen & Larkin, Charles & Lucey, Brian & Meegan, Andrew & Yarovaya, Larisa, 2020. "Cryptocurrency reaction to FOMC Announcements: Evidence of heterogeneity based on blockchain stack position," Journal of Financial Stability, Elsevier, vol. 46(C).
    32. Lorenz Bohn & Dirk Schiereck, 2023. "Regulation of data breach publication: the case of US healthcare and the HITECH act," Journal of Economics and Finance, Springer;Academy of Economics and Finance, vol. 47(2), pages 386-399, June.
    33. Eli Amir & Shai Levi & Tsafrir Livne, 2018. "Do firms underreport information on cyber-attacks? Evidence from capital markets," Review of Accounting Studies, Springer, vol. 23(3), pages 1177-1206, September.
    34. Jens Foerderer & Sebastian W. Schuetz, 2022. "Data Breach Announcements and Stock Market Reactions: A Matter of Timing?," Management Science, INFORMS, vol. 68(10), pages 7298-7322, October.
    35. Wang, Heng Emily & Wang, Qin Emma & Wu, Wentao, 2022. "Short selling surrounding data breach announcements," Finance Research Letters, Elsevier, vol. 47(PB).
    36. Carlini, Federico & Cucinelli, Doriana & Previtali, Daniele & Soana, Maria Gaia, 2020. "Don't talk too bad! stock market reactions to bank corporate governance news," Journal of Banking & Finance, Elsevier, vol. 121(C).
    37. Akyildirim, Erdinc & Corbet, Shaen & Sensoy, Ahmet & Yarovaya, Larisa, 2020. "The impact of blockchain related name changes on corporate performance," Journal of Corporate Finance, Elsevier, vol. 65(C).
    38. Claire Lending & Kristina Minnick & Patrick J. Schorno, 2018. "Corporate Governance, Social Responsibility, and Data Breaches," The Financial Review, Eastern Finance Association, vol. 53(2), pages 413-455, May.
    39. Franco Fiordelisi & Maria-Gaia Soana & Paola Schwizer, 2014. "Reputational losses and operational risk in banking," The European Journal of Finance, Taylor & Francis Journals, vol. 20(2), pages 105-124, February.
    40. Groening, Christopher & Kanuri, Vamsi Krishna, 2013. "Investor reaction to positive and negative corporate social events," Journal of Business Research, Elsevier, vol. 66(10), pages 1852-1860.
    41. Engle, Robert F, 1982. "Autoregressive Conditional Heteroscedasticity with Estimates of the Variance of United Kingdom Inflation," Econometrica, Econometric Society, vol. 50(4), pages 987-1007, July.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Meng, Wei, 2025. "System Modelling of Hybrid Warfare in Grey Zones: An Analysis of Synergistic Effects Between Disruptive Networks and Financial Market Manipulation," SocArXiv a4qme_v1, Center for Open Science.
    2. Catalin Gheorghe & Oana Panazan, 2025. "Quantifying Cybersecurity Impacts on Clean Energy Market Volatility: A Time-Frequency Approach," Mathematics, MDPI, vol. 13(8), pages 1-50, April.
    3. Bora Gündüzyeli, 2025. "Cyber Resilience in Digital Marketing Within the Framework of Sustainable Management," Sustainability, MDPI, vol. 17(5), pages 1-15, February.

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Chelsea Liu & Muhammad Ali Babar, 2026. "Corporate cybersecurity risk and data breaches: A systematic review of empirical research," Australian Journal of Management, Australian School of Business, vol. 51(1), pages 62-92, February.
    2. Martins, António Miguel & Moutinho, Nuno, 2025. "Stock-Term market impact of major cyber-attacks: Evidence for the ten most exposed insurance firms to cyber risk," Finance Research Letters, Elsevier, vol. 71(C).
    3. Conlon, Thomas & Corbet, Shaen & Oxley, Les, 2024. "The influence of European MiCa regulation on cryptocurrencies," Global Finance Journal, Elsevier, vol. 63(C).
    4. Cao, Hung & Phan, Hieu V. & Silveri, Sabatino, 2024. "Data breach disclosures and stock price crash risk: Evidence from data breach notification laws," International Review of Financial Analysis, Elsevier, vol. 93(C).
    5. António Miguel Martins & Nuno Moutinho & Susana Cró, 2025. "Stock market effects of major cyber-attacks: evidence for breached and cybersecurity listed firms," Journal of Banking Regulation, Palgrave Macmillan, vol. 26(4), pages 868-877, December.
    6. Corbet, Shaen & Goodell, John W., 2022. "The reputational contagion effects of ransomware attacks," Finance Research Letters, Elsevier, vol. 47(PB).
    7. Lee, Chien-Chiang & Wang, Chih-Wei & Lin, Weizheng & Chen, En-Jia, 2025. "Cyber risk and corporate share repurchases," International Review of Financial Analysis, Elsevier, vol. 103(C).
    8. Akyildirim, Erdinc & Corbet, Shaen & Ongena, Steven & Staunton, David, 2025. "Understanding reputational risks: The impact of ESG events on European banks," Journal of International Financial Markets, Institutions and Money, Elsevier, vol. 105(C).
    9. Garg, Mukesh & Wang, Tawei & Wilkin, Carla L., 2025. "Impact of reporting information security breaches, accounting quality, and the opportunistic disclosure of good news and bad news," International Journal of Accounting Information Systems, Elsevier, vol. 56(C).
    10. Li, Iris & Akyildirim, Erdinc & Conlon, Thomas & Corbet, Shaen, 2025. "Corporate reputational dynamics and their impact on global commodity markets," Journal of Commodity Markets, Elsevier, vol. 37(C).
    11. Singh, Amanjot, 2023. "Data breaches (hacking) and trade credit," Global Finance Journal, Elsevier, vol. 57(C).
    12. Nikolaos A. Kyriazis, 2021. "A Survey on Volatility Fluctuations in the Decentralized Cryptocurrency Financial Assets," JRFM, MDPI, vol. 14(7), pages 1-46, June.
    13. Isarin Durongkadej & Heng Emily Wang, 2025. "Data Breach Announcement Effect on Bank Loans, Deposits, and Stock Performance," Journal of Financial Services Research, Springer;Western Finance Association, vol. 68(3), pages 423-460, December.
    14. Peng‐Fei Dai & John W. Goodell & Luu Duc Toan Huynh & Zhifeng Liu & Shaen Corbet, 2023. "Understanding the transmission of crash risk between cryptocurrency and equity markets," The Financial Review, Eastern Finance Association, vol. 58(3), pages 539-573, August.
    15. Chris Florackis & Christodoulos Louca & Roni Michaely & Michael Weber, 2023. "Cybersecurity Risk," The Review of Financial Studies, Society for Financial Studies, vol. 36(1), pages 351-407.
    16. Xuanpu Lin & Guoman She, 2025. "Timely Cybersecurity Disclosure and Information Manipulation," Management Science, INFORMS, vol. 71(11), pages 9308-9327, November.
    17. Wang, Heng Emily & Wang, Qin Emma & Wu, Wentao, 2022. "Short selling surrounding data breach announcements," Finance Research Letters, Elsevier, vol. 47(PB).
    18. Wang, Jimin & Ho, Choy Yeing (Chloe) & Shan, Yuan George, 2024. "Does cybersecurity risk stifle corporate innovation activities?," International Review of Financial Analysis, Elsevier, vol. 91(C).
    19. Peng, Jin & Zhang, Haofei & Mao, Juan & Xu, Shouhuai, 2023. "Repeated data breaches and firm value," Economics Letters, Elsevier, vol. 224(C).
    20. Saeed Rabea Baatwah & Mohammed Asiri & Mohammed Saleh Bajaher & Ayoob Alyafai & Salem Baajajah, 2026. "Thriving post-cyberattacks: the power of control, disclosure, and IT maturity," Electronic Commerce Research, Springer, vol. 26(2), pages 1705-1743, April.

    More about this item

    Keywords

    ;
    ;
    ;
    ;
    ;
    ;

    JEL classification:

    • G14 - Financial Economics - - General Financial Markets - - - Information and Market Efficiency; Event Studies; Insider Trading
    • G32 - Financial Economics - - Corporate Finance and Governance - - - Financing Policy; Financial Risk and Risk Management; Capital and Ownership Structure; Value of Firms; Goodwill
    • G38 - Financial Economics - - Corporate Finance and Governance - - - Government Policy and Regulation
    • O38 - Economic Development, Innovation, Technological Change, and Growth - - Innovation; Research and Development; Technological Change; Intellectual Property Rights - - - Government Policy

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:intfin:v:97:y:2024:i:c:s1042443124001483. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: http://www.elsevier.com/locate/intfin .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.