-
Journal menu

- General information
- Editorial Board
- Instructions for authors
- Paper reviewing
- Publication Ethics and Malpractice Statement
- Journal policies
- Article Processing Charge
- Order hard copies of the journal (for institutions)
- Order hard copies of the journal (for individuals)
- Feedback from stakeholders
- Journal’s Open Access Statement
- Statement on the Use of Generative AI
Cyberattacks and business performance: Sectoral evidence from stock market reactions
Download This Article
This work is licensed under a Creative Commons Attribution 4.0 International License.
Abstract
The article examines the impact of cyberattacks on the market capitalization and short-term returns of leading companies in the finance, telecommunications, and information technology (IT) sectors. Using event analysis, abnormal return (AR), and cumulative abnormal return (CAR) estimation, the market sensitivity to cybersecurity incidents is determined for over 30 events over the period 2018–2024. The results indicate a short-term negative effect of cyberattacks, especially in the financial sector, while technology companies demonstrate a faster recovery of market positions. Differences in investor risk perception are identified depending on the industry, the duration of the attack, the history of previous incidents, and the reputational stability of the company. Cases of repeated attacks on one company are analyzed separately, indicating a change in the intensity of the market reaction over time. The findings complement existing empirical evidence on stock market sensitivity to cybersecurity incident disclosures documented in prior event-based studies (Cavusoglu et al., 2004; Romanosky, 2016) and provide insights for improving cyber risk management strategies, particularly with respect to disclosure practices and reputational shock monitoring systems.
Keywords: Cyberattack, Stock Volatility, Business Performance, Market Reaction
Authors’ individual contribution: Conceptualization — I.T., I.P., and A.S.; Methodology — I.T. and I.P.; Validation — I.P.; Investigation — I.T. and I.P.; Writing — Original Draft — I.T., I.P., and A.S.; Writing — Review & Editing — I.T., I.P., and A.S.; Visualization — I.T., I.P., and A.S.
Declaration of conflicting interests: The Authors declare that there is no conflict of interest.
JEL Classification: D82, G14, G32, M21
Received: 28.11.2025
Revised: 29.12.2025; 26.01.2026
Accepted: 04.02.2026
Published online: 06.02.2026
How to cite this paper: Tiutiunyk, I., Pozovna, I., & Semenog, A. (2026). Cyberattacks and business performance: Sectoral evidence from stock market reactions. Business Performance Review, 4(1), 68–80. https://doi.org/10.22495/bprv4i1p6
















