IDEAS home Printed from https://ideas.repec.org/a/oup/rfinst/v36y2023i1p351-407..html
   My bibliography  Save this article

Cybersecurity Risk

Author

Listed:
  • Chris Florackis
  • Christodoulos Louca
  • Roni Michaely
  • Michael Weber

Abstract

Based on textual analysis and a comparison of cybersecurity risk disclosures of firms that were hacked to others that were not, we propose a novel firm-level measure of cybersecurity risk for all U.S.-listed firms. We then examine whether cybersecurity risk is priced in the cross-section of stock returns. Portfolios of firms with high exposure to cybersecurity risk outperform other firms, on average, by up to 8.3 per year. Yet, high-exposure firms perform poorly in periods of high cybersecurity risk. Reassuringly, the measure is higher in information-technology industries, correlates with characteristics linked to firms hit by cyberattacks, and predicts future cyberattacks.Authors have furnished an Internet Appendix, which is available on the Oxford University Press Web site next to the link to the final published paper online

Suggested Citation

  • Chris Florackis & Christodoulos Louca & Roni Michaely & Michael Weber, 2023. "Cybersecurity Risk," The Review of Financial Studies, Society for Financial Studies, vol. 36(1), pages 351-407.
    • Handle: RePEc:oup:rfinst:v:36:y:2023:i:1:p:351-407.
    as

    Download full text from publisher

    File URL: http://hdl.handle.net/10.1093/rfs/hhac024
    Download Restriction: Access to full text is restricted to subscribers.
    ---><---

    As the access to this document is restricted, you may want to look for a different version below or search for a different version of it.

    Other versions of this item:

    References listed on IDEAS

    as
    1. Campbell, John Y. & Hentschel, Ludger, 1992. "No news is good news *1: An asymmetric model of changing volatility in stock returns," Journal of Financial Economics, Elsevier, vol. 31(3), pages 281-318, June.
    2. Shinichi Kamiya & Jun-Koo Kang & Jungmin Kim & Andreas Milidonis & René M. Stulz, 2018. "What is the Impact of Successful Cyberattacks on Target Firms?," NBER Working Papers 24409, National Bureau of Economic Research, Inc.
    3. Laurent Frésard & Gerard Hoberg & Gordon M Phillips & Francesca Cornelli, 2020. "Innovation Activities and Integration through Vertical Acquisitions," The Review of Financial Studies, Society for Financial Studies, vol. 33(7), pages 2937-2976.
    4. Michelle Lowry & Roni Michaely & Ekaterina Volkova & Francesca Cornelli, 0. "Information Revealed through the Regulatory Process: Interactions between the SEC and Companies ahead of Their IPO," Review of Financial Studies, Society for Financial Studies, vol. 33(12), pages 5510-5554.
    5. Bali, Turan G. & Cakici, Nusret & Whitelaw, Robert F., 2011. "Maxing out: Stocks as lotteries and the cross-section of expected returns," Journal of Financial Economics, Elsevier, vol. 99(2), pages 427-446, February.
    6. Kathleen Weiss Hanley, 2010. "The Information Content of IPO Prospectuses," The Review of Financial Studies, Society for Financial Studies, vol. 23(7), pages 2821-2864, July.
    7. Chen, Joseph & Hong, Harrison & Stein, Jeremy C., 2001. "Forecasting crashes: trading volume, past returns, and conditional skewness in stock prices," Journal of Financial Economics, Elsevier, vol. 61(3), pages 345-381, September.
    8. Tarek A Hassan & Stephan Hollander & Laurence van Lent & Ahmed Tahoun, 2019. "Firm-Level Political Risk: Measurement and Effects," The Quarterly Journal of Economics, President and Fellows of Harvard College, vol. 134(4), pages 2135-2202.
    9. Joachim Freyberger & Andreas Neuhierl & Michael Weber & Andrew KarolyiEditor, 2020. "Dissecting Characteristics Nonparametrically," Review of Financial Studies, Society for Financial Studies, vol. 33(5), pages 2326-2377.
    10. Zhi Da & Joseph Engelberg & Pengjie Gao, 2011. "In Search of Attention," Journal of Finance, American Finance Association, vol. 66(5), pages 1461-1499, October.
    11. Carhart, Mark M, 1997. "On Persistence in Mutual Fund Performance," Journal of Finance, American Finance Association, vol. 52(1), pages 57-82, March.
    12. Jegadeesh, Narasimhan, 1990. "Evidence of Predictable Behavior of Security Returns," Journal of Finance, American Finance Association, vol. 45(3), pages 881-898, July.
    13. Gerard Hoberg & Gordon Phillips, 2016. "Text-Based Network Industries and Endogenous Product Differentiation," Journal of Political Economy, University of Chicago Press, vol. 124(5), pages 1423-1465.
    14. Scott R. Baker & Nicholas Bloom & Steven J. Davis, 2016. "Measuring Economic Policy Uncertainty," The Quarterly Journal of Economics, President and Fellows of Harvard College, vol. 131(4), pages 1593-1636.
    15. Michelle Lowry & Roni Michaely & Ekaterina Volkova & Francesca Cornelli, 2020. "Information Revealed through the Regulatory Process: Interactions between the SEC and Companies ahead of Their IPO," The Review of Financial Studies, Society for Financial Studies, vol. 33(12), pages 5510-5554.
    16. Michael S. Drake & Darren T. Roulstone & Jacob R. Thornock, 2012. "Investor Information Demand: Evidence from Google Searches Around Earnings Announcements," Journal of Accounting Research, Wiley Blackwell, vol. 50(4), pages 1001-1040, September.
    17. Weber, Michael, 2018. "Cash flow duration and the term structure of equity returns," Journal of Financial Economics, Elsevier, vol. 128(3), pages 486-503.
    18. Lettau, Martin & Maggiori, Matteo & Weber, Michael, 2014. "Conditional risk premia in currency markets and other asset classes," Journal of Financial Economics, Elsevier, vol. 114(2), pages 197-225.
    19. Matthew Gentzkow & Bryan Kelly & Matt Taddy, 2019. "Text as Data," Journal of Economic Literature, American Economic Association, vol. 57(3), pages 535-574, September.
    20. Tim Loughran & Bill Mcdonald, 2016. "Textual Analysis in Accounting and Finance: A Survey," Journal of Accounting Research, Wiley Blackwell, vol. 54(4), pages 1187-1230, September.
    21. Panayiotis C. Andreou & Christodoulos Louca & Andreas P. Petrou, 2017. "CEO Age and Stock Price Crash Risk," Review of Finance, European Finance Association, vol. 21(3), pages 1287-1325.
    22. Amihud, Yakov, 2002. "Illiquidity and stock returns: cross-section and time-series effects," Journal of Financial Markets, Elsevier, vol. 5(1), pages 31-56, January.
    23. Fama, Eugene F. & French, Kenneth R., 2015. "A five-factor asset pricing model," Journal of Financial Economics, Elsevier, vol. 116(1), pages 1-22.
    24. Antoine Bouveret, 2018. "Cyber Risk for the Financial Sector: A Framework for Quantitative Assessment," IMF Working Papers 2018/143, International Monetary Fund.
    25. Fama, Eugene F. & French, Kenneth R., 1993. "Common risk factors in the returns on stocks and bonds," Journal of Financial Economics, Elsevier, vol. 33(1), pages 3-56, February.
    26. Gerard Hoberg & Vojislav Maksimovic, 2015. "Redefining Financial Constraints: A Text-Based Analysis," The Review of Financial Studies, Society for Financial Studies, vol. 28(5), pages 1312-1352.
    27. Gerard Hoberg & Gordon Phillips, 2010. "Product Market Synergies and Competition in Mergers and Acquisitions: A Text-Based Analysis," The Review of Financial Studies, Society for Financial Studies, vol. 23(10), pages 3773-3811, October.
    28. Kamiya, Shinichi & Kang, Jun-Koo & Kim, Jungmin & Milidonis, Andreas & Stulz, René M., 2021. "Risk management, firm reputation, and the impact of successful cyberattacks on target firms," Journal of Financial Economics, Elsevier, vol. 139(3), pages 719-749.
    29. Matthias M M Buehlmaier & Toni M Whited, 2018. "Are Financial Constraints Priced? Evidence from Textual Analysis," The Review of Financial Studies, Society for Financial Studies, vol. 31(7), pages 2693-2728.
    30. Eli Amir & Shai Levi & Tsafrir Livne, 2018. "Do firms underreport information on cyber-attacks? Evidence from capital markets," Review of Accounting Studies, Springer, vol. 23(3), pages 1177-1206, September.
    31. Fama, Eugene F & MacBeth, James D, 1973. "Risk, Return, and Equilibrium: Empirical Tests," Journal of Political Economy, University of Chicago Press, vol. 81(3), pages 607-636, May-June.
    32. Lang, Mark & Stice-Lawrence, Lorien, 2015. "Textual analysis and international financial reporting: Large sample evidence," Journal of Accounting and Economics, Elsevier, vol. 60(2), pages 110-135.
    33. Tim Loughran & Bill Mcdonald, 2011. "When Is a Liability Not a Liability? Textual Analysis, Dictionaries, and 10‐Ks," Journal of Finance, American Finance Association, vol. 66(1), pages 35-65, February.
    34. Campbell R. Harvey & Akhtar Siddique, 2000. "Conditional Skewness in Asset Pricing Tests," Journal of Finance, American Finance Association, vol. 55(3), pages 1263-1295, June.
    35. Jegadeesh, Narasimhan & Titman, Sheridan, 1993. "Returns to Buying Winners and Selling Losers: Implications for Stock Market Efficiency," Journal of Finance, American Finance Association, vol. 48(1), pages 65-91, March.
    36. Claire Lending & Kristina Minnick & Patrick J. Schorno, 2018. "Corporate Governance, Social Responsibility, and Data Breaches," The Financial Review, Eastern Finance Association, vol. 53(2), pages 413-455, May.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Martin Boyer & Martin Eling, 2023. "New advances on cyber risk and cyber insurance," The Geneva Papers on Risk and Insurance - Issues and Practice, Palgrave Macmillan;The Geneva Association, vol. 48(2), pages 267-274, April.
    2. Crosignani, Matteo & Macchiavelli, Marco & Silva, André F., 2023. "Pirates without borders: The propagation of cyberattacks through firms’ supply chains," Journal of Financial Economics, Elsevier, vol. 147(2), pages 432-448.
    3. Daniel Celeny & Loic Mar'echal & Evgueni Rousselot & Alain Mermoud & Mathias Humbert, 2024. "Prioritizing Investments in Cybersecurity: Empirical Evidence from an Event Study on the Determinants of Cyberattack Costs," Papers 2402.04773, arXiv.org.
    4. Lattanzio, Gabriele & Ma, Yue, 2023. "Cybersecurity risk and corporate innovation," Journal of Corporate Finance, Elsevier, vol. 82(C).
    5. Chang, Jin-Wook & Jayachandran, Kartik & Ramírez, Carlos A. & Tintera, Ali, 2024. "On the anatomy of cyberattacks," Economics Letters, Elsevier, vol. 238(C).
    6. Daniel Celeny & Loic Mar'echal, 2024. "Cyber risk and the cross-section of stock returns," Papers 2402.04775, arXiv.org, revised Mar 2024.
    7. Alex Kim & Maximilian Muhn & Valeri Nikolaev, 2023. "Bloated Disclosures: Can ChatGPT Help Investors Process Information?," Papers 2306.10224, arXiv.org, revised Feb 2024.
    8. Gilles Hilary & Vanessa Serret, 2023. "Governance and Digital Transformation [Gouvernance et transformation numérique]," Post-Print hal-04380300, HAL.
    9. Loic Mar'echal & Alain Mermoud & Dimitri Percia David & Mathias Humbert, 2024. "Measuring the performance of investments in information security startups: An empirical analysis by cybersecurity sectors using Crunchbase data," Papers 2402.04765, arXiv.org, revised Feb 2024.
    10. Loic Mar'echal & Nathan Monnet, 2024. "Disentangling the sources of cyber risk premia," Papers 2409.08728, arXiv.org.
    11. Ersahin, Nuri & Giannetti, Mariassunta & Huang, Ruidi, 2024. "Supply chain risk: Changes in supplier composition and vertical integration," Journal of International Economics, Elsevier, vol. 147(C).

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Cakici, Nusret & Zaremba, Adam, 2022. "Salience theory and the cross-section of stock returns: International and further evidence," Journal of Financial Economics, Elsevier, vol. 146(2), pages 689-725.
    2. Cakici, Nusret & Zaremba, Adam, 2023. "Recency bias and the cross-section of international stock returns," Journal of International Financial Markets, Institutions and Money, Elsevier, vol. 84(C).
    3. Langlois, Hugues, 2020. "Measuring skewness premia," Journal of Financial Economics, Elsevier, vol. 135(2), pages 399-424.
    4. Atilgan, Yigit & Bali, Turan G. & Demirtas, K. Ozgur & Gunaydin, A. Doruk, 2020. "Left-tail momentum: Underreaction to bad news, costly arbitrage and equity returns," Journal of Financial Economics, Elsevier, vol. 135(3), pages 725-753.
    5. Chabi-Yo, Fousseni & Huggenberger, Markus & Weigert, Florian, 2022. "Multivariate crash risk," Journal of Financial Economics, Elsevier, vol. 145(1), pages 129-153.
    6. Hollstein, Fabian & Prokopczuk, Marcel & Wese Simen, Chardin, 2020. "Beta uncertainty," Journal of Banking & Finance, Elsevier, vol. 116(C).
    7. Bradrania, Reza & Veron, Jose Francisco, 2023. "The beta anomaly in the Australian stock market and the lottery demand," Pacific-Basin Finance Journal, Elsevier, vol. 77(C).
    8. Cederburg, Scott & O’Doherty, Michael S. & Wang, Feifei & Yan, Xuemin (Sterling), 2020. "On the performance of volatility-managed portfolios," Journal of Financial Economics, Elsevier, vol. 138(1), pages 95-117.
    9. EOM, Cheoljun & EOM, Yunsung & PARK, Jong Won, 2024. "Intermediate cross-sectional prospect theory value in stock markets: A novel method," International Review of Financial Analysis, Elsevier, vol. 93(C).
    10. Cosemans, Mathijs & Frehen, Rik, 2021. "Salience theory and stock prices: Empirical evidence," Journal of Financial Economics, Elsevier, vol. 140(2), pages 460-483.
    11. Bali, Turan G. & Brown, Stephen J. & Tang, Yi, 2017. "Is economic uncertainty priced in the cross-section of stock returns?," Journal of Financial Economics, Elsevier, vol. 126(3), pages 471-489.
    12. Bui, Dien Giau & Kong, De-Rong & Lin, Chih-Yung & Lin, Tse-Chun, 2023. "Momentum in machine learning: Evidence from the Taiwan stock market," Pacific-Basin Finance Journal, Elsevier, vol. 82(C).
    13. Kewei Hou & Chen Xue & Lu Zhang, 2017. "Replicating Anomalies," NBER Working Papers 23394, National Bureau of Economic Research, Inc.
    14. Qiao, Tongshuai & Ding, Wenjie & Han, Liyan & Li, Donghui, 2024. "RMB exchange rate volatility and the cross-section of Chinese A-share returns," Journal of International Money and Finance, Elsevier, vol. 142(C).
    15. George P. Gao & Xiaomeng Lu & Zhaogang Song, 2019. "Tail Risk Concerns Everywhere," Management Science, INFORMS, vol. 65(7), pages 3111-3130, July.
    16. Huang, Tao & Li, Junye, 2019. "Option-Implied variance asymmetry and the cross-section of stock returns," Journal of Banking & Finance, Elsevier, vol. 101(C), pages 21-36.
    17. Ji Cao & Marc Oliver Rieger & Lei Zhao, 2019. "Safety First, Loss Probability, and the Cross Section of Expected Stock Returns," Working Paper Series 2019-02, University of Trier, Research Group Quantitative Finance and Risk Analysis.
    18. Tse-Chun Lin & Xin Liu, 2018. "Skewness, Individual Investor Preference, and the Cross-section of Stock Returns [Illiquidity and stock returns: cross-section and time-series effects]," Review of Finance, European Finance Association, vol. 22(5), pages 1841-1876.
    19. Xu, Zhongxiang & Chevapatrakul, Thanaset & Li, Xiafei, 2019. "Return asymmetry and the cross section of stock returns," Journal of International Money and Finance, Elsevier, vol. 97(C), pages 93-110.
    20. Wang, Feifei & Yan, Xuemin Sterling, 2021. "Downside risk and the performance of volatility-managed portfolios," Journal of Banking & Finance, Elsevier, vol. 131(C).

    More about this item

    JEL classification:

    • G14 - Financial Economics - - General Financial Markets - - - Information and Market Efficiency; Event Studies; Insider Trading
    • G12 - Financial Economics - - General Financial Markets - - - Asset Pricing; Trading Volume; Bond Interest Rates
    • G32 - Financial Economics - - Corporate Finance and Governance - - - Financing Policy; Financial Risk and Risk Management; Capital and Ownership Structure; Value of Firms; Goodwill

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:oup:rfinst:v:36:y:2023:i:1:p:351-407.. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Oxford University Press (email available below). General contact details of provider: https://edirc.repec.org/data/sfsssea.html .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.