We develop a model where a firm has an optimal exposure to cyber risk. With rational, fully informed agents and with no hysteresis, a successful cyberattack should have no impact on a financially unconstrained target's reputation and post-attack policies. In contrast, when a successful attack...

We examine which firms are targets of cyberattacks and how they are affected. We find that cyberattacks cause firms to reassess the risks that they are exposed to and their consequences, so that they have real effects on firm policies even when targets are not financially constrained....

Some argue too-big-to-fail (TBTF) status increases the value of the largest banks. In contrast, we find that the value of the largest banks is negatively related to asset size in normal times, but not during the financial crisis when TBTF status was most valuable. Further, shareholders lose when...