Timely Cybersecurity Disclosure and Information Manipulation

Published Online:https://doi.org/10.1287/mnsc.2023.01058

References

  • Aboody D, Kasznik R (2000) CEO stock option awards and the timing of corporate voluntary disclosures. J. Accounting Econom. 29(1):73–100.CrossrefGoogle Scholar
  • Akey P, Grégoire V, Martineau C (2022) Price revelation from insider trading: Evidence from hacked earnings news. J. Financial Econom. 143(3):1162–1184.CrossrefGoogle Scholar
  • Ali U, Hirshleifer D (2017) Opportunism as a firm and managerial trait: Predicting insider trading profits and misconduct. J. Financial Econom. 126(3):490–515.CrossrefGoogle Scholar
  • Altamuro J, Beatty A (2010) How does internal control regulation affect financial reporting? J. Accounting Econom. 49(1–2):58–74.CrossrefGoogle Scholar
  • Amir E, Levi S, Livne T (2018) Do firms underreport information on cyber-attacks? Evidence from capital markets. Rev. Accounting Stud. 23(3):1177–1206.CrossrefGoogle Scholar
  • Amir E, Levi S, Livne T (2020) Insider trading and disclosure: The case of cyberattacks. Working paper, Tel Aviv University, Tel Aviv, Israel.Google Scholar
  • Arif S, Kepler J, Schroeder J, Taylor D (2022) Audit process, private information, and insider trading. Rev. Accounting Stud. 27(3):1–32.CrossrefGoogle Scholar
  • Ashraf M, Sunder J (2022) Can shareholders benefit from consumer protection disclosure mandates? Evidence from data breach disclosure laws and the cost of equity. Accounting Rev. 98(4):1–32.Google Scholar
  • Bebchuk LA, Grinstein Y, Peyer U (2010) Lucky CEOs and lucky directors. J. Finance 65(6):2363–2401.CrossrefGoogle Scholar
  • Bertomeu J, Marinovic I (2016) A theory of hard and soft information. Accounting Rev. 91(1):1–20.CrossrefGoogle Scholar
  • Biggerstaff L, Cicero D, Puckett A (2015) Suspect CEOs, unethical culture, and corporate misbehavior. J. Financial Econom. 117(1):98–121.CrossrefGoogle Scholar
  • Blackburne T, Kepler J, Quinn PJ, Taylor D (2021) Undisclosed SEC investigations. Management Sci. 67(6):3403–3418.LinkGoogle Scholar
  • Bourveau T, Lou Y, Wang R (2018) Shareholder litigation and corporate disclosure: Evidence from derivative lawsuits. J. Accounting Res. 56(3):797–842.CrossrefGoogle Scholar
  • Christensen H, Hail L, Leuz C (2021) Mandatory CSR and sustainability reporting: Economic analysis and literature review. Rev. Accounting Stud. 26(3):1176–1248.CrossrefGoogle Scholar
  • Cohen A, Jackson R Jr, Mitts J (2016) The 8-K trading gap. Working paper, Columbia Law School, New York.Google Scholar
  • Cohen L, Malloy C, Pomorski L (2012) Decoding inside information. J. Finance 67(3):1009–1043.CrossrefGoogle Scholar
  • Coles JL, Daniel ND, Naveen L (2013) Calculation of compensation incentives and firm-related wealth using Execucomp: Data, program, and explanation. Working paper, Arizona State University, Tempe.Google Scholar
  • Crosignani M, Macchiavelli M, Silva AF (2023) Pirates without borders: The propagation of cyberattacks through firms’ supply chains. J. Financial Econom. 147(2):432–448.CrossrefGoogle Scholar
  • Dechow P, Lawrence A, Ryans J (2016) SEC comment letters and insider sales. Accounting Rev. 91(2):401–439.CrossrefGoogle Scholar
  • Dhaliwal DS, Li OZ, Tsang A, Yang YG (2011) Voluntary nonfinancial disclosure and the cost of equity capital: The initiation of corporate social responsibility reporting. Accounting Rev. 86(1):59–100.CrossrefGoogle Scholar
  • Doyle J, Ge W, McVay S (2007) Determinants of weaknesses in internal control over financial reporting. J. Accounting Econom. 44(1–2):193–223.CrossrefGoogle Scholar
  • Dye RA (1985) Disclosure of nonproprietary information. J. Accounting Res. 23(1):123–145.CrossrefGoogle Scholar
  • Dye RA, Sridhar SS (2004) Reliability‐relevance trade‐offs and the efficiency of aggregation. J. Accounting Res. 42(1):51–88.CrossrefGoogle Scholar
  • Florackis C, Louca C, Michaely R, Weber M (2023) Cybersecurity risk. Rev. Financial Stud. 36(1):351–407.CrossrefGoogle Scholar
  • Foerderer J, Schuetz S (2022) Data breach announcements and stock market reactions: A matter of timing? Management Sci. 68(10):7298–7322.LinkGoogle Scholar
  • Gao P, Zhang G (2019) Accounting manipulation, peer pressure, and internal control. Accounting Rev. 94(1):127–151.CrossrefGoogle Scholar
  • Graham J, Harvey C, Rajgopal S (2005) The economic implications of corporate financial reporting. J. Accounting Econom. 40(1–3):3–73.CrossrefGoogle Scholar
  • Grewal J, Riedl EJ, Serafeim G (2019) Market reaction to mandatory nonfinancial disclosure. Management Sci. 65(7):3061–3084.LinkGoogle Scholar
  • Huang H, Wang C (2021) Do banks price firms’ data breaches? Accounting Rev. 96(3):261–286.CrossrefGoogle Scholar
  • Huang S, Roychowdhury S, Sletten E (2020) Does litigation deter or encourage real earnings management? Accounting Rev. 95(3):251–278.CrossrefGoogle Scholar
  • Huddart S, Ke B, Shi C (2007) Jeopardy, non-public information, and insider trading around SEC 10-K and 10-Q filings. J. Accounting Econom. 43(1):3–36.CrossrefGoogle Scholar
  • Jagolinzer A, Larcker D, Taylor D (2011) Corporate governance and the information content of insider trades. J. Accounting Res. 49(5):1249–1274.CrossrefGoogle Scholar
  • Jagolinzer A, Larcker D, Ormazabal G, Taylor D (2020) Political connections and the informativeness of insider trades. J. Finance 75(4):1833–1876.CrossrefGoogle Scholar
  • Janakiraman R, Lim J, Rishika R (2018) The effect of a data breach announcement on customer behavior: Evidence from a multichannel retailer. J. Marketing 82(2):85–105.CrossrefGoogle Scholar
  • Jung W, Kwon Y (1988) Disclosure when the market is unsure of information endowment of managers. J. Accounting Res. 26(1):146–153.CrossrefGoogle Scholar
  • Kamiya S, Kang J, Kim J, Milidonis A, Stulz R (2021) Risk management, firm reputation, and the impact of successful cyberattacks on target firms. J. Financial Econom. 139(3):719–749.CrossrefGoogle Scholar
  • Kanodia C, Sapra H, Venugopalan R (2004) Should intangibles be measured: What are the economic trade‐offs? J. Accounting Res. 42(1):89–120.CrossrefGoogle Scholar
  • Kim I, Skinner D (2012) Measuring securities litigation risk. J. Accounting Econom. 53(1–2):290–310.CrossrefGoogle Scholar
  • Kothari SP, Shu S, Wysocki P (2009) Do managers withhold bad news? J. Accounting Res. 47(1):241–276.CrossrefGoogle Scholar
  • Leuz C, Wysocki P (2016) The economics of disclosure and financial reporting regulation: Evidence and suggestions for future research. J. Accounting Res. 54(2):525–622.CrossrefGoogle Scholar
  • Li Y, Richardson G, Thornton D (1997) Corporate disclosure of environmental liability information: Theory and evidence. Contemporary Accounting Res. 14(3):435–474.CrossrefGoogle Scholar
  • Lin Z, Sapp T, Ulmer J, Parsa R (2020) Insider trading ahead of cyber breach announcements. J. Financial Markets 50:100527.CrossrefGoogle Scholar
  • Mitts J, Talley E (2019) Informed trading and cybersecurity breaches. Harvard Bus. Law Rev. 9(1):2–51.Google Scholar
  • Patell JM, Wolfson MA (1982) Good news, bad news, and the intraday timing of corporate disclosures. Accounting Rev. 57(3):509–527.Google Scholar
  • Perkins C (2021) Security breach notification chart. Accessed April 17, 2023, https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart.html.Google Scholar
  • Romanosky S, Telang R, Acquisti A (2011) Do data breach disclosure laws reduce identity theft? J. Policy Anal. Management 30(2):256–286.CrossrefGoogle Scholar
  • Schwartz PM, Janger EJ (2006) Notification of data security breaches. Michigan Law Rev. 105(5):913.Google Scholar
  • SEC (2018) Commission statement and guidance on public company cybersecurity disclosures. Accessed April 17, 2023, https://federalregister.gov/d/2018-03858.Google Scholar
  • SEC (2022) Cybersecurity risk management, strategy, governance, and incident disclosure. Accessed April 17, 2023, https://www.sec.gov/news/press-release/2022-39.Google Scholar
  • SEC (2023) Cybersecurity risk management, strategy, governance, and incident disclosure final rule. Accessed May 20, 2024, https://www.sec.gov/news/press-release/2022-39.Google Scholar
  • She G (2022) The real effects of mandatory nonfinancial disclosure: Evidence from supply chain transparency. Accounting Rev. 97(5):399–425.CrossrefGoogle Scholar
  • Skinner D (1994) Why firms voluntarily disclose bad news. J. Accounting Res. 32(1):38–60.CrossrefGoogle Scholar
  • Skinner D (1995) Do the SEC’s safe harbor provisions encourage forward-looking disclosures? Financial Analysts J. 51(4):38–44.CrossrefGoogle Scholar
  • Solove D, Citron D (2017) Risk and anxiety: A theory of data-breach harms. Texas Law Rev. 96(4):737.Google Scholar
  • Suk I, Wang M (2021) Does target firm insider trading signal the target’s synergy potential in mergers and acquisitions? J. Financial Econom. 142(3):1155–1185.CrossrefGoogle Scholar
  • Thompson AM, Urcan O, Yoon H (2023) Do companies redact material information from confidential SEC filings? Evidence from the FAST Act. Accounting Rev. 98(4):405–433.CrossrefGoogle Scholar
  • Versano T (2021) Silence can be golden: On the value of allowing managers to keep silent when information is soft. J. Accounting Econom. 71(2–3):101399.CrossrefGoogle Scholar
  • Winn JK (2009) Are better security breach notification laws possible? Berkeley Tech. Law J. 24(3):1133.Google Scholar
  • Yermack D (1997) Good timing: CEO stock option awards and company news announcements. J. Finance 52(2):449–476.CrossrefGoogle Scholar
INFORMS site uses cookies to store information on your computer. Some are essential to make our site work; Others help us improve the user experience. By using this site, you consent to the placement of these cookies. Please read our Privacy Statement to learn more.