Abstract:Purpose The detrimental impact of data breaches on organizations and their customers has been well documented in the literature. These breaches expose sensitive information, raising concerns about reputational damage and substantial financial losses for affected firms. Prior research has consistently demonstrated the significant financial repercussions of data breach disclosures, with a significant decline in the market value of breached firms following the incident's revelation. However, recent literature has documented the shift in consumer perception toward data breaches, warranting a revisit of this important and relevant issue with more recent data. This study aims to revisit the cost of data breach disclosures by empirically analyzing the impact of recent data breach incidents on the market value of affected firms. Design/methodology/approach The authors collect the data regarding data breach incidents among publicly traded companies in the USA listed in the S&P 500 index from 2013 to 2021. The empirical analysis relies on the event study approach, and the market value of each firm is estimated using the Fama-French three-factor model. Findings This study finds that the negative market reaction to data breach announcements in recent years has been significantly weaker than those reported in prior works from the past decade. This result confirms the shift in consumer perception toward data breaches in the market. Originality/value While prior research has quantified the cost of data breach disclosures, the authors posit that a renewed examination is essential within the contemporary digital environment. Consumer behavior and market sentiment have undergone significant transformations in recent years, necessitating a revisit of this important issue with updated data. This study not only documents this evolving phenomenon but also yields crucial policy recommendations. Notably, it challenges the conventional wisdom to rely on market forces as an adequate deterrent against data breaches. Consequently, updated regulations may be necessary to effectively navigate the complexities of the evolving digital landscape.

The hidden cost of silence: How delayed cyberattack disclosure erodes firm profitability

Understanding the Cost associated with Data Security Breaches.

Disclosure and Cost of Equity Capital Revisited

Stock Market Reaction To Data Breaches: The Moderating Role Of Corporate Social Responsibility

Transparency Pays: How Carbon Emission Disclosure Lowers Cost of Capital

The Role of Corporate Reputation and Crisis Response Strategies in Data Breach Management.

Differential Market Reaction to Data Security Breaches: A Screening Perspective

The Audit Committee's IT Expertise and Its Impact on the Disclosure of Cybersecurity Risk

Prioritizing Investments in Cybersecurity: Empirical Evidence from an Event Study on the Determinants of Cyberattack Costs

Repeated data breaches and executive compensation

Revisiting the (disappearing) cost of data breach disclosures

Risk factors disclosure and corporate philanthropy

The Impact of Customer’s Reported Cybersecurity Breaches on Key Supplier’s Relationship-Specific Investments and Relationship Duration

Information disclosure, firm growth, and the cost of capital

Sound and Fury, Signifying Nothing? Impact of Data Breach Disclosure Laws

Market uncertainty and disclosure of internal control deficiencies under the Sarbanes–Oxley Act

Analysis and impact of COVID-19 disclosures: is IT-services different from others?

Corporate social responsibility disclosure and the cost of equity capital: The roles of stakeholder orientation and financial transparency

Does the Public Availability of Market Participantss Trading Data Affect Firm Disclosure? Evidence from Short Sellers

To protect or to hide-an investigation on corporate redacted disclosure motives under new FAST act regulation

Determinants and economic consequences of voluntary disclosure of internal control weaknesses in China