Spillover of Information Security Incidents' Impact: The Moderating Role of Social Networks and IT

The objective of this study is to examine the contagion effect of a major security incident. We argue that the impact of security incidents is not limited to a single firm, but that it spills over to other firms. We theorize that firms that are similar to the breached firm in terms of the characteristics of top managers, and those with economic link ties to the breached firm, are likely to experience a stronger contagion effect.

[1]  René M. Stulz,et al.  Do Banking Shocks Affect Borrowing Firm Performance? An Analysis of the Japanese Experience , 1998 .

[2]  D. Hambrick,et al.  Upper Echelons: The Organization as a Reflection of Its Top Managers , 1984 .

[3]  Sundaresh Ramnath,et al.  Investor and Analyst Reactions to Earnings Announcements of Related Firms: An Empirical Analysis , 2002 .

[4]  Vernon J. Richardson,et al.  Information Transfer among Internet Firms: The Case of Hacker Attacks , 2003, J. Inf. Syst..

[5]  Ping Wang,et al.  Chasing the Hottest IT: Effects of Information Technology Fashion on Organizations , 2010, MIS Q..

[6]  Andrea Frazzini,et al.  Economic Links and Predictable Returns , 2007 .

[7]  Cosma Rohilla Shalizi,et al.  Homophily and Contagion Are Generically Confounded in Observational Social Network Studies , 2010, Sociological methods & research.

[8]  Yang Yu,et al.  The impact of social and conventional media on firm equity value: A sentiment analysis approach , 2013, Decis. Support Syst..

[9]  W. Bruce Johnson,et al.  The Contagion Effects of Accounting Restatements , 2007 .

[10]  Brian L. Connelly,et al.  Toward a “theoretical toolbox” for sustainability research in marketing , 2011 .

[11]  C. Fee,et al.  Sources of Gains in Horizontal Mergers: Evidence from Customer, Supplier, and Rival Firms , 2003 .

[12]  Vilmos F. Misangyi,et al.  Investor Perceptions of Financial Misconduct: The Heterogeneous Contamination of Bystander Firms , 2015 .

[13]  M. Ross Quillian,et al.  A revised design for an understanding machine , 1962, Mech. Transl. Comput. Linguistics.

[14]  Rajdeep Grewal,et al.  Environments, unobserved heterogeneity, and the effect of market orientation on outcomes for high-tech firms , 2013 .

[15]  Larry H. P. Lang,et al.  Contagion and competitive intra-industry effects of bankruptcy announcements , 1992 .

[16]  Arun Sundararajan,et al.  Distinguishing influence-based contagion from homophily-driven diffusion in dynamic networks , 2009, Proceedings of the National Academy of Sciences.

[17]  Allan Collins,et al.  A spreading-activation theory of semantic processing , 1975 .

[18]  M. Ross Quillian,et al.  The teachable language comprehender: a simulation program and theory of language , 1969, CACM.

[19]  Diana C. Robertson,et al.  Compound Relationships between Firms , 2007 .

[20]  Paul Jen-Hwa Hu,et al.  Top Persuader Prediction for Social Networks , 2016, MIS Q..

[21]  Ashish Garg,et al.  Quantifying the financial impact of IT security breaches , 2003, Inf. Manag. Comput. Secur..

[22]  Jie Jennifer Zhang,et al.  Social Media and Firm Equity Value , 2013, Inf. Syst. Res..

[23]  Carol V. Brown,et al.  ERP Investments and the Market Value of Firms: Toward an Understanding of Influential ERP Project Variables , 2006, Inf. Syst. Res..

[24]  Kelly Shue,et al.  Executive Networks and Firm Policies: Evidence from the Random Assignment of MBA Peers , 2013 .

[25]  Cesare Fracassi,et al.  Corporate Finance Policies and Social Networks , 2017, Manag. Sci..

[26]  Liwu Hsu,et al.  Birds of a feather: intra-industry spillover of the Target customer data breach and the shielding role of IT, marketing, and CSR , 2017 .

[27]  Micah S. Officer,et al.  Inter-Firm Linkages and the Wealth Effects of Financial Distress Along the Supply Chain , 2008 .