Firms are collecting more information about their customers than ever before in an attempt to understand and better serve customer needs. At the same time, firms are becoming more vulnerable to the compromise of customer information through security breaches. This study attempts to associate breach reports with the decline in market value of firms using an event study. The results show that firms suffer significant market value depreciation over a short as well as a long time window. Further, the greatest devaluation occurs when larger amounts of customer information are compromised at large companies. Due to the greater potential of customer backlash, negative publicity and liability risk, managers must view customer information breaches as service failures rather than as information system failures. Employing established service failure recovery strategies may allow firms to quickly and proactively address customer privacy concerns and thereby mitigate negative market reaction to information breaches.
Acquisti, Alesandro, Allan Friedman, and Rahul Telang ( 2006), ‘‘Is There a Cost to Privacy Breaches? An Event Study,’’proceedings of the Twenty-Seventh International Conference on Information Systems, Milwaukee, WI.
2.
Aiken, Leona S. and Stephen G. West ( 1991), Multiple Regression: Testing and Interpreting Interactions. Newbury Park, CA: SAGE.
3.
Anand, Bharat N. and Tarun Khanna ( 2000), ‘‘Do Firms Learn to Create Value? The Case of Alliances,’’Strategic Management Journal, 21 (3), 295-315.
4.
Banking Technology (2008), ‘‘Data Breaches Cost FS Firms 17% More Than in Other Industries,’’Banking Technology, March 8.
5.
Berry, Leonard ( 1995), On Great Service: A Framework for Action. New York: The Free Press.
6.
Bitner, Mary JoBernard H. Booms, and Tetreault, M. ( 1990), ‘‘The Service Encounter: Diagnosing Favourable and Unfavourable Incidents,’’ Journal of Marketing , 54 (1), 71-84.
7.
Bitner, Mary Jo, Stephen W. Brown, and Matthew L. Meuter (2000), ‘‘Technology Infusion in Service Encounters,’’Journal of the Academy of Marketing Science, 28 (1), 138-149.
8.
Blattberg, Robert C. and John Deighton ( 1991), ‘‘Interactive Marketing: Exploiting the Age of Addressability,’’Sloan Management Review, 33 (1), 5-14.
9.
Bloom, Paul N., George R. Milne, Robert Adler ( 1994), ‘‘Avoiding Misuse of Information Technologies: Legal and Societal Considerations,’’Journal of Marketing, 58 (January), 98-110.
10.
Boehmer, Ekkehart, Jim Musumeci, and Annette B. Poulsen (1991), ‘‘Event-study Methodology Under Conditions of Event-induced Variance,’’Journal of Financial Economics, 30 (2), 253-272.
11.
Brown, Stephen J. and Jerold B. Warner ( 1985), ‘‘Using Daily Stock Returns: The Case of Event Studies,’’Journal of Financial Economics14 (March), 3-31.
12.
Brown, Steven P. and Ricard F. Beltramini ( 1989), ‘‘Consumer Complaining and Word of Mouth Activities: Field Evidence,’’Advances in Consumer Research, 16 (1), 9-16.
13.
Bunker, Matthew P. and A. Dwayne Ball ( 2008), ‘‘Causes and Consequences of Grudge-holding in Service Relationships,’’Journal of Services Marketing, 22 (1), 37-47.
14.
Cable, John, Andrew Henley, and Kevin Holland ( 2002), ‘‘Pot of Gold or Winner’s Curse? An Event Study of the Auctions of 3G Mobile Telephone Licenses in the UK, ’’ Fiscal Studies, 23 (4), 447-462.
15.
Campbell, Katherine, Lawrence A. Gordon, Martin P. Loeb, and Lei Zhou ( 2003), ‘‘The Economic Cost of Publicly Announced Information Security Breaches: Empirical Evidence from the Stock Market,’’Journal of Computer Security, 11 (3), 431-448.
16.
Capron, Laurence and Jung-Chin Shen ( 2007), ‘‘Acquisitions of Private vs. Public Firms: Private Information, Target Selection, and Acquirer Returns,’’ Strategic Management Journal, 28 (9), 891-911.
17.
Carhart, Mark M. ( 1997), ‘‘On Persistence in Mutual Fund Performance,’’Journal of Finance, 52 (1), 57-82.
18.
Cavusoglu, Huseyin, Birendra Mishra, and Srinivasan Raghunathan (2004), ‘‘The Effect of Internet Security Breach Announcements on Market Value: Capital Market Reactions for Breached Firms and Internet Security Developers, ’’ International Journal of Electronic Commerce, 9 (1), 70-104.
19.
Chan, Su Han, John W. Kensingerc, Arthur J. Keown, and John D. Martin (1997), ‘‘Do Strategic Alliances Create Value?’’Journal of Financial Economics, 46 (2), 199-222.
20.
Conrad, Jennifer, Bradford Cornell, and Wayne R. Landsman (2002), ‘‘When Is Bad News Really Bad News?’’Journal of Finance , 57 (6), 2507-2532.
21.
Conrad, Jennifer and Gautam Kaul ( 1993), ‘‘Long-term Market Overreaction or Biases in Computed Returns?,’’ Journal of Finance , 48 (1), 39-63.
22.
Corrado, Charles J. ( 1989), ‘‘A Nonparametric Test for Abnormal Security-price Performance in Event Studies,’’Journal of Financial Economics, 23 (2), 1989, 385-395.
23.
Cowan, Arnold R. and Anne M.A. Sergeant ( 1996), ‘‘Trading Frequency and Event Study Test Specification,’’Journal of Banking & Finance , 20 (10), 1731-1757.
24.
Culnan, Mary J. and Pamela K. Armstrong ( 1999), ‘‘Information Privacy Concerns, Procedural Fairness, and Impersonal Trust: An Empirical Investigation,’’Organization Science, 10 (1), 104-115.
25.
Dos Santos, Brian L., Ken Peffers, and David C. Mauer (1993), ‘‘The Impact of Information Technology Investment Announcements on the Market Value of the Firm,’’Information Systems Research, 4 (1), 1-23.
26.
Dutta, Amitava and Kevin McCrohan ( 2002), ‘‘Management’s Role in Information Security in a Cyber Economy,’’ California Management Review, 45 (1), 67-87.
27.
Fama, Eugene F. ( 1970), ‘‘Efficient Capital Markets: A Review of Theory and Empirical Work,’’Journal of Finance , 25 (2), 383-417. Fama, Eugene F. and Kenneth R. French ( 1993), ‘‘Common Risk Factors in the Returns on Stocks and Bonds,’’Journal of Financial Economics , 33 (February), 3-56.
28.
Glazer, Rashi ( 1991), ‘‘Marketing in an Information-intensive Environment: Strategic Implications of Knowledge as an Asset,’’Journal of Marketing, 55 (October), 1-19.
29.
Graddy, Duane B. and Thomas H. Strickland ( 2007), ‘‘Public Information as a Deterrent to Environmental Infractions,’’Applied Economics , 39 (15), 1961-1972.
30.
Hoffman, Donna L., Thomas P. Novak, and Marcos A. Peralta (1999), ‘‘Information Privacy in the Marketspace: Implications for the Commercial Uses of Anonymity on the Web,’’Information Society, 15 (2), 129-139.
31.
Hovav, Anat and John D’Arcy ( 2003), ‘‘The Impact of Denial-of-service Attack Announcements on the Market Value of Firms,’’Risk Management & Insurance Review, 6 (2), 97-121.
32.
Hsu, Hung-Chia, Adam V. Reed, and Jörg Rocholl (2010), ‘‘The New Game in Town: Competitive Effects of IPOs.’’Journal of Finance, 65 (2), 495-528.
33.
Johannisson, Bengt and Christian Lindström ( 1971), ‘‘Firm Size and Inventive Activity,’’Swedish Journal of Economics, 73 (4), 427-442. Kalaignanam , Kartik, Venkatesh Shankar, Rajan Vardarajan (2007), ‘‘Asymmetric New Product Development Alliances: Win-win or lose-lose Partnerships?,’’Management Science , 53 (3), 357-374. Kalamas, Maria, Michael Laroche, and Lucy Makdessian ( 2008), ‘‘Reaching the Boiling Point: Consumers’ Negative Affective Reactions to Firm-attributed Service Failures,’’Journal of Business Research, 61 (8), 813-824,.
34.
Kannan, Karthik, Jackie Rees, and Sanjay Sridhar ( 2007), ‘‘Market Reactions to Information Security Breach Announcements: An Empirical Analysis,’’ International Journal of Electronic Commerce, 12 (1), 69-91.
35.
Kothari, S.P. and Jerold B. Warner (2006), ‘‘Econometrics of Event Studies,’’ in Handbook of Corporate Finance: Empirical Corporate Finance, volume A (Handbooks in Finance Series), B. Espen Eckbo, ed. , chapter 1. North Holland: Elsevier.
36.
Kwansa, Francis A. ( 1994), ‘‘Acquisitions, Shareholder Wealth and the Lodging Sector: 1980-1990,’’International Journal of Contemporary Hospitality Management, 6 (6), 16-20.
Lewicki, Roy J. and Barbara B. Bunker ( 1996), ‘‘Developing and Maintaining Trust in Work Relationships,’’ in Trust in Organizations: Frontiers of Theory and Research, R. M. Kramer and T. R. Tyler, eds. . Thousand Oaks, CA: SAGE, 114-139. MacKinlay, A. Craig ( 1997), ‘‘Event Studies in Economics and Finance,’’Journal of Economic Literature, 35 (1), 13-39. McCollough , Michael A., Leonard L. Berry, and Manjit S. Yadav ( 2000), ‘‘An Empirical Investigation of Customer Satisfaction After Service Failure and Recovery,’’Journal of Service Research , 3 (2), 121-137.
39.
Montoya-Weiss, Mitzi M., Glenn B. Voss, and Dhruv Grewal ( 2003), ‘‘Determinants of Online Channel Use and Overall Satisfaction with a Relational, Multichannel Service Provider,’’Journal of the Academyof Marketing Science, 31 (4), 448-458.
40.
Murphy, Paul R., James M. Daley, and A. Michael Knemeyer (1999), ‘‘Comparing Logistics Management in Small and Large Firms: An Exploratory Study,’’Transportation Journal, 38 (4), 18-25. Parasuraman , A. and George M. Zinkhan (2002), ‘‘Marketing To and Serving Customers Through the Internet: An Overview and Research Agenda,’’Journal of Academy of Marketing Science, 30 (4), 286-295.
41.
Parasuraman, A., Valarie A. Zeithaml, and Arvind Malhotra (2005), ‘‘E-S-QUAL: A Multiple-item Scale for Assessing Electronic Service Quality,’’Journal of Service Research, 7 (3), 213-233. Patell , James M. (1976), ‘‘Corporate Forecasts of Earnings Per Share and Stock Price Behavior: Empirical Tests,’’Journal of Accounting Research , 14 (2), 246-276.
42.
PGP Research Report (2006), ‘‘2006 Annual Study: Cost of a Data Breach: Understanding Financial Impact, Customer Turnover, and Preventative Solutions,’’http://www.computerworld.com/pdfs/PGP_Annual_Study_PDF.pdf. (accessed on March 16, 2009).
43.
Pine II, B. Joseph ( 1992), Mass Customization: The New Frontier in Business Competition . MA: Harvard Business School Press.
44.
Ponemon Institute (2008), ‘‘Consumers’ Report Card on Data Breach Notification.’’ April 15, 2008, Research Report by Ponemon Institute, LLC.
45.
Robinson, Sandra L. and Denise M. Rousseau ( 1994), ‘‘Violating the Psychological Contract: Not the Exception but the Norm,’’Journal of Organizational Behavior, 15 (3), 245-259.
46.
Roos, Inger ( 1999), ‘‘Switching Processes in Customer Relationships ,’’ Journal of Service Research , 2 (1), 376-393.
47.
Smith, Amy K., Ruth N. Bolton, and Janet Wagner ( 1999), ‘‘A Model of Customer Satisfaction with Service Encounters Involving Failure and Recovery,’’Journal of Marketing Research, 36 (3), 356-373.
48.
Smith, Don A. ( 2006), ‘‘The Still Growing Problem of Data Breach and Identity Theft,’’Banking Law Journal , 123 (10), 919-924.
49.
Subramani, Mani and Eric Walden ( 2001), ‘‘The Impact of e-commerce Announcements on the Market Value of Firms,’’ Information Systems Research, 12 (2), 135-154.
50.
Swaminathan, Vanitha and Christine Moorman ( 2009), ‘‘Marketing Alliances, Firm Networks, and Firm Value Creation,’’Journal of Marketing , 73 (5), 52-69.
51.
Swaminathan, Vanitha, Feisal Murshed, and John Hulland ( 2008), ‘‘Value Creation Following Merger and Acquisition Announcements: The Role of Strategic Emphasis Alignment, ’’ Journal of Marketing Research, 45 (1), 33-47.
52.
Tax, Stephen S. and Stephen W. Brown ( 2000), ‘‘Service Recovery, Research Insights and Practices,’’ in Handbook of Services Marketing and Management, T.A. Swartz and D. Iacobucci, eds., Thousand Oaks, CA : SAGE, 271-285.
53.
Ting-Heng, Chu, Lin Che-Chun, and Larry J. Prather (2005), ‘‘An Extension of Security Price Reactions Around Product Recall Announcements,’’Quarterly Journal of Business & Economics, 44 (3/4), 33-48.
54.
van Doorn, Jenny and Peter C. Verhoef ( 2008), ‘‘Critical Incidents and the Impact of Satisfaction on Customer Share,’’Journal of Marketing, 72 (4), 123-142.
55.
Wall Street & Technology (2007), ‘‘Businesses Still Lack Data Security,’’ July 16.
56.
Wang, Sijun and Lenard Huff ( 2007), ‘‘Explaining a Buyer’s Response to a Seller’s Violation of Trust,’’ European Journal of Marketing, 41 (9-10), 1033-1052.
57.
Wirtz, Jochen, May O. Lwin, and Jerome D. Williams (2007), ‘‘Causes and Consequences of Consumer Online Privacy Concern,’’International Journal of Service Industry Management, 18 (4), 326-348.
58.
Wolfe, Daniel ( 2007), ‘‘Data Breach Tab Higher at Financial Firms,’’American Banker, 172 (229), 10.
59.
Zhu, Zhen, K. Sivakumar, and A. Parasuraman ( 2004), ‘‘A Mathematical Model of Service Failure and Recovery Strategies,’’ Decision Sciences , 35 (3), 493-525.
