The effect of cyberattacks on European financial institutions: An event study approach

Download This Article

This work is licensed under a Creative Commons Attribution 4.0 International License.

Abstract

This paper investigates how cyberattacks affect the market valuation of European financial institutions. Using an event study methodology on a sample of 31 cyber incidents affecting European financial firms between 2016 and 2024, we document a clear and statistically significant negative market reaction concentrated on the announcement day. Importantly, we find no evidence of abnormal price movements prior to disclosure, which is inconsistent with systematic insider trading. In contrast to prior studies that report pre-announcement abnormal returns (ARs) around cyber incident disclosures, our findings suggest that information leakages and insider trading may be less of a concern in the European financial sector. A time-trend analysis reveals diverging patterns: while the impact of non-confidential attacks has intensified, the market response to confidentiality breaches has weakened, consistent with improved disclosure and crisis management practices.

Keywords: Cybersecurity, Event Study, Abnormal Returns, Stock Market

Authors’ individual contribution: Conceptualization — F.G. and F.M.M.; Methodology — F.G.; Formal Analysis — F.G.; Investigation — F.G.; Writing — Original Draft — F.G. and F.M.M.; Writing — Review & Editing — F.G. and F.M.M.; Supervision — F.M.M.; Funding Acquisition — F.M.M.

Declaration of conflicting interests: The Authors declare that there is no conflict of interest.

JEL Classification: G14, G21

Received: 26.11.2025
Revised: 24.02.2026; 05.03.2026
Accepted: 13.03.2026
Published online: 17.03.2026

How to cite this paper: Gervasutti, F., & Manenti, F. M. (2026). The effect of cyberattacks on European financial institutions: An event study approach. Corporate Ownership & Control, 23(1), 84–94. https://doi.org/10.22495/cocv23i1art8