The effect of data breach announcements beyond the stock price: Empirical evidence on market activity

Extending the literature that has focused thus far on stock price impact, this study investigates the effect of data breach announcements on market activity, specifically through the response of the bid-ask spread and trading volume. We investigate data breach announcements as a potential source of asymmetric information and provide a new dimension to the ongoing debate on market efficiency. Adopting an event study methodology on a sample of 74 data breaches from 2005 to 2014, we find that data breach announcements have a positive short-term effect on both bid-ask spread and trading volume. The effect is only evidenced however on the day of the event, with market efficiency ensuring a quick return to normal market activity. No abnormal trading activity emerges before announcements, so there is no evidence in our study that these types of events are being exploited by informed market participants. The magnitude of event day effects is found to be more pronounced for large breaches, and when the breach involves lost devices.

[1]  H. Demsetz,et al.  The Cost of Transacting , 1968 .

[2]  R. N. Charette,et al.  Managing Risk in Software Maintenance , 1997, IEEE Softw..

[3]  George J. Benston,et al.  Determinants of bid-asked spreads in the over-the-counter market , 1974 .

[4]  Kweku-Muata Osei-Bryson,et al.  Investigating the Impact of Publicly Announced Information Security Breaches on Three Performance Indicators of the Breached Firms , 2009, Inf. Resour. Manag. J..

[5]  Shane A. Corwin,et al.  A Simple Way to Estimate Bid-Ask Spreads from Daily High and Low Prices , 2011 .

[6]  A. Hovav,et al.  The Impact of Denial‐of‐Service Attack Announcements on the Market Value of Firms , 2003 .

[7]  A. Frino,et al.  The impact of electronic trading on bid‐ask spreads: Evidence from futures markets in Hong Kong, London, and Sydney , 2004 .

[8]  Lei Zhou,et al.  The impact of information security breaches: Has there been a downward shift in costs? , 2011, J. Comput. Secur..

[9]  Lifan Wu,et al.  Introduction and expiration effects of derivative equity warrants in Hong Kong , 2001 .

[10]  Hiding Behind the Veil: Informed Traders and Pre-Trade Opacity , 2010 .

[11]  Huseyin Cavusoglu,et al.  The Effect of Internet Security Breach Announcements on Market Value: Capital Market Reactions for Breached Firms and Internet Security Developers , 2004, Int. J. Electron. Commer..

[12]  Veda C. Storey,et al.  Business Intelligence and Analytics: From Big Data to Big Impact , 2012, MIS Q..

[13]  H. Stoll.  THE PRICING OF SECURITY DEALER SERVICES: AN EMPIRICAL STUDY OF NASDAQ STOCKS , 1978 .

[14]  A. Frino,et al.  The determinants of market bid ask spreads on the Australian Stock Exchange : cross-sectional analysis , 1996 .

[15]  Jane K. Winn,et al.  Are 'Better' Security Breach Notification Laws Possible? , 2009 .

[16]  Joshua G. Coyne,et al.  The Role of the Business Press in Creating and Disseminating Information around Earnings Announcements , 2019, European Accounting Review.

[17]  Diana R. Franz,et al.  INFORMED TRADING RISK AND BID‐ASK SPREAD CHANGES AROUND OPEN MARKET STOCK REPURCHASES IN THE NASDAQ MARKET , 1995 .

[18]  Charles M. C. Lee,et al.  Spreads, Depths, and the Impact of Earnings Information: An Intraday Analysis , 1993 .

[19]  Brian J. Bushee,et al.  The Role of the Business Press as an Information Intermediary , 2009 .

[20]  Menachem Brenner,et al.  Informed Options Trading Prior to M&A Announcements: Insider Trading? , 2015 .

[21]  Kevin M. Gatzlaff,et al.  The Effect of Data Breaches on Shareholder Wealth , 2008 .

[22]  Michel Benaroch,et al.  An Event Study Analysis of the Economic Impact of IT Operational Risk and its Subcategories , 2011, J. Assoc. Inf. Syst..

[23]  Alan R. Dennis,et al.  Systems Analysis and Design: An Object-Oriented Approach with UML , 2015 .

[24]  R. Roll,et al.  A Simple Implicit Measure of the Effective Bid-Ask Spread in an Efficient Market , 2008 .

[25]  J. Affleck-Graves,et al.  Earnings Predictability, Information Asymmetry, and Market Liquidity , 2002 .

[26]  C. Yoo,et al.  Event Study Analysis , 2019, Financial Econometrics.

[27]  Nancy L. Stokey,et al.  Information, Trade, and Common Knowledge , 1982 .

[28]  Alessandro Acquisti,et al.  Empirical Analysis of Data Breach Litigation , 2013, WEIS.

[29]  Sundar G. Bharadwaj,et al.  Information Technology Effects on Firm Performance as Measured by Tobin's q , 1999 .

[30]  Paul T. Jaeger,et al.  Identifying the security risks associated with governmental use of cloud computing , 2010, Gov. Inf. Q..

[31]  Michael Minelli,et al.  Big Data, Big Analytics: Emerging Business Intelligence and Analytic Trends for Today's Businesses , 2012 .

[32]  Charles Trzcinka,et al.  A New Estimate of Transaction Costs , 1999 .

[33]  Craig W. Holden,et al.  New Low-Frequency Spread Measures , 2009 .

[34]  Jason Lee,et al.  Earnings Announcements and the Components of the Bid-Ask Spread , 1996 .

[35]  Jiang Wang,et al.  A Model of Competitive Stock Trading Volume , 1994, Journal of Political Economy.

[36]  Jörg Prokop,et al.  Stock price effects of asset securitization: The case of liquidity facility providers , 2015 .

[37]  Jeremy Michels.  Disclosure versus Recognition: Inferences from Subsequent Events , 2016 .

[38]  J. Affleck-Graves,et al.  Detecting Abnormal Bid-Ask Spread: A Comparison of Event Study Methods , 2000 .

[39]  Gregory S. Miller,et al.  The Role of Dissemination in Market Liquidity: Evidence from Firms' Use of Twitter , 2013 .

[40]  Teri Lombardi Yohn,et al.  Management Forecasts and Information Asymmetry: An Examination of Bid-Ask Spreads , 1997 .

[41]  Roger H. L. Chiang,et al.  Big Data Research in Information Systems: Toward an Inclusive Research Agenda , 2016, J. Assoc. Inf. Syst..

[42]  E. Fama.  EFFICIENT CAPITAL MARKETS: A REVIEW OF THEORY AND EMPIRICAL WORK* , 1970 .

[43]  Christopher J. Novak,et al.  2009 Data Breach Investigations Report , 2009 .

[44]  An empirical examination of the impact of market microstructure changes on the determinants of option bid–ask spreads , 2003 .

[45]  Paul R. Milgrom,et al.  Bid, ask and transaction prices in a specialist market with heterogeneously informed traders , 1985 .

[46]  P. Limpaphayom,et al.  Insider ownership, bid–ask spread, and stock splits: Evidence from the Stock Exchange of Thailand , 2006 .

[47]  Ashish Garg,et al.  Quantifying the financial impact of IT security breaches , 2003, Inf. Manag. Comput. Secur..

[48]  Jeffrey Pontiff,et al.  Does Academic Research Destroy Stock Return Predictability? , 2015 .

[49]  S. Viswanathan,et al.  A theory of the interday variations in volume , 1990 .

[50]  R. Chiang,et al.  Information Asymmetry and the Dealer's Bid-Ask Spread: A Case Study of Earnings and Dividend Announcements , 1986 .

[51]  Clemens Martin,et al.  Quantifying the financial impact of it security breaches on business processes , 2014, 2014 Twelfth Annual International Conference on Privacy, Security and Trust.

[52]  Jin Boon Wong,et al.  Market Behaviour around Bankruptcy Announcements: Evidence from the Australian Stock Exchange , 2007 .

[53]  Stefan Ruenzi,et al.  Commonality in Liquidity: A Demand-Side Explanation , 2015 .

[54]  Auditor change announcements and dispersion of investor expectations , 1993 .

[55]  Jeremy Michels.  Disclosure Versus Recognition: Inferences from Subsequent Events: DISCLOSURE VERSUS RECOGNITION , 2017 .

[56]  David Easley,et al.  Discerning Information from Trade Data , 2015 .

[57]  Anat R. Admati,et al.  A Theory of Intraday Patterns: Volume and Price Variability , 1988 .

[58]  Dan Galai,et al.  Information Effects on the Bid‐Ask Spread , 1983 .

[59]  J. Chae,et al.  Trading Volume, Information Asymmetry, and Timing Information , 2005 .

[60]  Lei Zhou,et al.  The Economic Cost of Publicly Announced Information Security Breaches: Empirical Evidence from the Stock Market , 2003, J. Comput. Secur..

[61]  Jiang Wang,et al.  Trading Volume: Definitions, Data Analysis, and Implications of Portfolio Theory , 2000 .

[62]  Richard L. Arend.  The Definition of Strategic Liabilities, and their Impact on Firm Performance , 2004 .

[63]  A. Kyle.  Continuous Auctions and Insider Trading , 1985 .

[64]  Informational Content of Options Trading on Acquirer Announcement Return , 2015 .