Information security breaches and financial market reaction: the French case

Mendiela, Pauline (2021): Information security breaches and financial market reaction: the French case.

Abstract

This study examines the impact of information security breaches on the stock returns on French companies. Using the event study methodology, we provide insights on the effect of cyberattack announcements on the market value of French companies from 2009 to 2019. We show that following cyberattack announcements, stock returns significantly decrease. We find that financial companies are more negatively impacted than other industries. Our results lead conclude that cybersecurity is now fully integrated into risk management and the overall strategy of companies. Cyber resilience appears to be the essential element to face current threats and reassure investors.

• Item Type: MPRA Paper
• Language: French
• Keywords: Cybersecurity; Market reaction; Stock returns; Event Study
• Subjects: A - General Economics and Teaching > A1 - General Economics > A10 - General; G - Financial Economics > G1 - General Financial Markets; G - Financial Economics > G1 - General Financial Markets > G10 - General; G - Financial Economics > G1 - General Financial Markets > G15 - International Financial Markets

References

Accenture (2019). The cost of cybercrime. Annual cost of cybercrime study. Acquisti, A., et coll. (2006). Is there a cost to privacy breaches? An event study.

Amir, E. et coll (2018). Do Firms Underreport Information on Cyber-Attacks? Evidence from Capital Markets. SSRN Electronic Journal. 10.2139/ssrn.3136193.

Bener, A.B. (2000). Risk perception, trust and credibility: a case in Internet banking. University College of London, London.

Benlemlih, M., Jaballah, J., & Peillex, J. (2018). Does it really pay to do better? Exploring the financial effects of changes in CSR ratings. Applied Economics, 50(51), 5464-5482.

Benlemlih, M., & Peillex, J. (2019). Revisiter la question «Does it pay to be good?» dans le contexte européen. Recherches en Sciences de Gestion, (1), 243-263

Boufama, Omar. (2013). La méthodologie d'étude d'évènement : Une méthode et des outils à s'approprier en finance. Revue des sciences humaines.

Brockett, P.L. et coll. (2012). Enterprise cyber risk management. In: Risk management for the future – Theory and cases. Emblemsvag, J. (ed.), pp. 319-340

Campbell, K. et coll. (2003). The Economic Cost of Publicly Announced Information Security Breaches: Empirical evidence from the stock market, Journal of Computer Security 11(3): 431–448.

Cavusoglu, H et coll. (2004). The effect of Internet security breach announcements on market value: capital market reactions for breached firms and Internet security developers. International Journal of Electronic Commerce, 9(1), 69-104.

Desbrières, P., Erragragui, E., & Peillex, J. (2018). L’investissement conforme à la Charia est-il socialement responsable?. Management International/International Management/Gestión Internacional, 22(3), 51-64.

Desbrières, P., ERRAGRAGUI, E., & PEILLEX, J. (2017). L’investissement conforme à la Charia est-il socialement responsable?, Is Shariah compliant investment socially responsible? (No. 1171001). Université de Bourgogne-CREGO EA7317 Centre de recherches en gestion des organisations.

Ernst & Young (2018), EY Global Information Security Survey 2018–19.

El Ouadghiri, I., Mignon, V., & Boitout, N. (2016). On the impact of macroeconomic news surprises on Treasury-bond returns. Annals of Finance, 12(1), 29-53.

El Ouadghiri, I., & Peillex, J. (2018). Public attention to “Islamic terrorism” and stock market returns. Journal of Comparative Economics, 46(4), 936-946.

El Ouadghiri, I., & Uctum, R. (2016). Jumps in equilibrium prices and asymmetric news in foreign exchange markets. Economic Modelling, 54, 218-234.

El Ouadghiri, I., & Uctum, R. (2020). Macroeconomic expectations and time varying heterogeneity: evidence from individual survey data. Applied Economics, 52(23),2443-2459.

El Ouadghiri, I., Guesmi, K., Peillex, J., & Ziegler, A. (2019). Public attention to environmental issues and stock market returns (No. 22-2019). Joint Discussion Paper Series in Economics

Fama, E.F. (1970). Efficient Capital Markets: A review of theory and empirical work, Journal of Finance 25(2): 383–417.

Erragragui, E., Hassan, M. K., Peillex, J., & Khan, A. N. F. (2018). Does ethics improve stock market resilience in times of instability?. Economic Systems, 42(3), 450-469.

Fama, E.F. (1998). Market Efficiency, Long-term Returns, and Behavioral Finance, Journal of Financial Economics 49(3): 283–306.

Fama, Fisher et coll. (1969), The adjustment of stock prices to new information., International Economic Review, 10, pp. 1-21. In Journal of Research in Pharmaceutical Economics, vol 11, 2001, pp. 1-17.

Garg et coll. (2003). Quantifying the financial impact of IT security breaches. Inf. Manag. Comput. Security. 11. 74-83.

Gordon, et coll. (2011). The impact of information security breaches: Has there been a downward shift in costs? , Journal of Computer Security, vol. 19, no. 1, pp. 33-56, 2011.

Hovav, A. and D’Arcy, J. (2003). The Impact of Denial-of-service Attack Announcements on the Market Value of Firms, Risk Management and Insurance Review 6(2): 97–121.

Hovav, A. and D’Arcy, J. (2004). The Impact of Virus Attack Announcements on the Market Value of Firms, Information Systems Security 13(3): 32–40.

Kamiya, et coll. (2018). What is the Impact of Successful Cyberattacks on Target Firms?. SSRN Electronic Journal.

Kamiya et coll. (2020). Risk management, firm reputation, and the impact of successful cyberattacks on target firms. Journal of Financial Economics. 10.1016/j.jfineco.2019.05.019.

Kannan, A. et coll. (2007). Market reaction to information security breach announcements: an empirical analysis. , International Journal of Electronic Commerce, 12(1), 69-91.

L’express.fr (2017), Cyberattaque mondiale "WannaCry", le ransomware qui chiffre les données.https://www.lexpress.fr/actualite/monde/vague-internationale-de-cyberattaques_1907798.html

Norton (2017), Norton Cyber Security Insights Report - Global Results

Peillex, J. (2014). L'Offre de produits de placement éthiques: décision de lancement, conception et réaction du marché financier (Doctoral dissertation, Amiens).

Peillex, J., Erragragui, E., Bitar, M., & Benlemlih, M. (2019). The contribution of market movements, asset allocation and active management to Islamic equity funds’ performance. The Quarterly Review of Economics and Finance, 74, 32-38.

Peillex, J., Boubaker, S., & Comyns, B. (2019). Does It Pay to Invest in Japanese Women? Evidence from the MSCI Japan Empowering Women Index. Journal of Business Ethics, 1-19.

Peillex, J., El Ouadghiri, I., Gomes, M., & Jaballah, J. Extreme heat and stock market activity. Ecological Economics, 179, 106810.

Peillex, J., & Comyns, B. (2020). Pourquoi les sociétés financières décident-elles d’adopter les Principes des Nations Unies pour l’Investissement Responsable?. Comptabilite-Controle-Audit, 26(1), 79-117.

Peillex, J., & Comyns, B. (2020). Why do financial companies adopt the United Nations Principles for Responsible Investment?. Comptabilité-Contrôle-Audit, 26(1), 79-117.

Peillex, J., & Ureche-Rangau, L. (2012). Création d'un indice boursier islamique sur la place financière de Paris: méthodologie et performance. Revue d'économie financière,(3), 289-314.

Peillex, J., & Ureche-Rangau, L. (2013). Is there a place for a shariah-compliant index on the Paris stock market?. International journal of business, 18(2), 131.

Peillex, J., & Ureche-Rangau, L. (2014). How does the Market Price of the Corporate Sponsor React to Socially Responsible Fund Introductions?. Bankers, Markets & Investors, (131), 17-29.

Peillex, J., & Ureche-Rangau, L. (2016). Identifying the determinants of the decision to create socially responsible funds: An empirical investigation. Journal of business ethics, 136(1), 101 117.

Peillex, J., & Ureche-Rangau, L. (2015). Comment expliquer la performance financière de l’investissement conforme à la Charia?. Management international/International Management/Gestiòn Internacional, 19(2), 128-139.

Shackelford S.J. (2012). Should Your Firm Invest in Cyber Risk Insurance?, Business Horizons, 55(4), 349-356.

Sharpe W. (1963), A simplified model for portfolio analysis , Management Science, pp. 277-293. In Review of Quantitative Finance and Accounting, vol 11, 1998, pp. 111-137.

Skrepnek Grant & Lawson Kenneth, Measuring changes in capital market security: The event study methodology , Journal of Research in Pharmaceutical Economics, 11 (2001), pp. 1-17.

Winn, J. & Govern, K. (2009). Identity theft: risks and challenges to business of data compromise. Journal of Science Technology & Environmental Law, 28(1) , 49-63.

Ghernaouti-Hélie, Solange, Dufour Arnaud (2012), “Cybercriminalité et cybersécurité”, Presses Universitaires de France, « Que sais-je ? », p. 94-108

Ghernaouti, Solange, et Christian Aghroum (2012). “Cyber-résilience, risques et dépendances : pour une nouvelle approche de la cyber-sécurité”, Sécurité et stratégie, vol. 11, no. 4, pp. 74- 83.

IDC France, Blog (2019) https://www.blog-idcfrance.com/

Wavestone (2016) Opérateur d’importance vitale – Cybersécurité et conformité LPM https://www.wavestone.com/app/uploads/2016/11/operateur-importance-vitale-cybersecurite- conformite-lpm.pdf