Investigating the impact of publicly announced information security breaches on organizational performance
Myung Ko, Kweku-Muata Osei-Bryson, Carlos Dorantes · RePEc: Research Papers in Economics · 2007
This paper examines the impact of information security breaches on organizational performance. Up to now, there are only a few previous studies that investigated the stock market reaction of security breaches over a few days from the announcement. Using a matched sample comparison group, we incestigated the impact of information security breaches on breached firms' performance over a period of four quarters from the public announcement and examined whether breached firms perform worse than before the breach or worse than their peer firms in the industry.The result of our study to counter to initial expectations, suggesting that for some of performance measures of the breached firm were better ag=fter the breach than for the corresponding pre-breach period and also the treatment outperformed their peer firms in the indistry for the most of performance measures. Thus, although the market value of the breached firm might drop temporarily as indicated in the previous event studies, it did not impact on its financial performance over the longer periods of time, at least, over four quarters as shown in our study. Our Study also includes some important implications for managers and stock market investors.