We examine the relation between insider trading and corporate disclosure of cyberattacks. We distinguish between companies that voluntarily disclosed cyberattacks and those that withheld information on the incidents, and parties outside the attacked company later discovered the incident. We find...

Firms should disclose information on material cyber-attacks. However, because managers have incentives to withhold negative information, and investors cannot discover most cyber-attacks independently, firms may underreport them. Using data on cyber-attacks that firms voluntarily disclosed, and...