Using textual analysis and comparing cybersecurity-risk disclosures of firms that were hacked to others that were not, we propose a novel firm-level measure of cybersecurity risk for all US-listed firms. We then examine whether cybersecurity risk is priced in the cross-section of stock returns....

We develop a novel firm-level measure of cybersecurity risk using textual analysis of cybersecurity-risk disclosures in corporate filings. The measure successfully identifies firms extensively discussing cybersecurity risk in their 10-K, displays intuitive relations with quantitative measures of...

State-sponsored cyber attacks are increasingly attracting attention in the literature, with many analysts interested in the firm-level economic implications of these attacks. Nevertheless, the bulk of these studies focus on firms directly targeted in the attacks. In this paper, I examine the...

Digital exchanges, which convert funds between national currencies and cryptocurrencies, are often the victims of cybersecurity attacks. We investigate the impact of such cybersecurity breaches on bitcoin returns. Using several alternative specifications we test the hypothesis that bitcoin...

Purpose of the article: Cyber security has become a key factor in determining the success or failure of companies that rely on information systems. However, this entails considerable investment. Typical investments in information technology aim to create value, while investments in cyber...

This paper examines the dispersion in cybersecurity risk across firms. Using new, proprietary data on the Fortune 500 firms, We show that higher productivity firms exhibit abnormal returns. We subsequently document three new facts: (a) higher productivity firms have fewer cybersecurity...