Unraveling the Impact of Data Breaches: Evidence From the US Healthcare Sector

• 成果类型: Article
• 署名作者: Kwon, Juhee; Johnson, M. Eric
• 署名单位: City University of Hong Kong; Vanderbilt University
• 刊物名称: PRODUCTION AND OPERATIONS MANAGEMENT
• ISSN/ISSBN: 1059-1478
• DOI: 10.1177/10591478241305351
• 发表日期: 2025
• 页码: 1779-1798
• 关键词: Breach Resilience; Empirical Research; healthcare management; Information Security; risk management

摘要

As data breaches become an increasingly common risk, they are now a matter of when rather than if. While there has been active research on breaches, much of the work has focused on the antecedents and prevention of breaches, leaving the quantitative ramifications and variations in breach impact relatively unexplored. To address this gap, our study quantifies the impact of breaches on operational performance and identifies how operational, technological, and market factors moderate the impact. Using a quasi-experimental design with a difference-in-differences technique and propensity score matching, we analyzed a matched sample of 1,766 US hospitals, consisting of 883 breached hospitals and their non-breached peers from 2010 to 2017. We find that breached hospitals experience a 2.1% reduction in hospital admissions and a 0.28% decrease in market share. Moreover, network affiliation, decentralized governance, and cloud-based information technology services negatively moderate breach impacts, while IT security systems for detection, identity governance, and recovery provide mitigating effects. Additionally, we find that breaches in one hospital spillover to affect non-breached hospitals in the same local market. Our findings contribute to the operations management and security literature and provide managerial insights for enhancing breach resilience. Understanding these moderating factors can help hospital managers and policymakers formulate tailored mitigation strategies.