Another Day, Another Data Breach (Volume 116) (English shop)

Investigating the Impact of Companies‘ Response Actions after a Data Breach

Preview

Extract, PDF (270 KB)
Table of Contents, PDF (110 KB)

Data breaches, which compromise the confidentiality of customer data that a company stores, have become a common problem for many companies today. Due to sophisticated attacks that are evolving constantly, companies have no chance to prevent data breaches completely. Once a company becomes a victim of a data breach, it is legally obligated to disclose the event to its affected customers. This announcement often leads to a financial disaster due to public disclosure of a data breach that negatively impacts a company’s market value, as well as customers’ relationship with the company, and in a worst-case scenario, it can threaten the company’s very existence.
Currently, recommendations and standards to minimize these losses are lacking, but affected companies do not remain inactive and react ad hoc to the double-edged negative consequences by developing strategies, the so-called response strategy, to limit damage through the public announcement of the data breach. However, it remains unclear whether and how these response strategies make an impact.
This dissertation analyzes response strategies’ effects via four studies and clarifies whether and how these strategies can impact negative consequences.