BREACHED AND DENIED: THE COST OF DATA BREACHES ON INDIVIDUALS AS MORTGAGE APPLICATION DENIALS

• 成果类型: Article
• 署名作者: Pang, Min-Seok; Vance, Anthony
• 署名单位: University of Wisconsin System; University of Wisconsin Madison; Virginia Polytechnic Institute & State University
• 刊物名称: MIS QUARTERLY
• ISSN/ISSBN: 0276-7783
• DOI: 10.25300/MISQ/2024/18787
• 发表日期: 2025
• 页码: 465-494
• 关键词: racial-discrimination; Security investments; INFORMATION; RACE; segregation; IMPACT; credit; RISK; care; perceptions

摘要

While a large body of information systems (IS) literature has investigated the antecedents and consequences of data breaches in organizations, we do not have a good understanding of whether a data breach has a material impact on individuals whose private information is compromised and how much damage it causes. We overcome empirical challenges in investigating the impact of data breaches on individual victims by utilizing a unique natural experimental setting that allows us to credibly identify treated and controlled populations-the breach of South Carolina (SC) taxpayer records in 2012. With residents in SC as the treatment group and those in Georgia and North Carolina as the control group, our difference-in-differences estimations find that after the breach at the SC Department of Revenue, there was a significant increase in denials to SC residents' residential mortgage applications for refinance and home improvement. We also find that the adverse impact of the breach was more profound for Black and Hispanic residents. Our study provides significant theoretical and policy implications with respect to the harm and costs of a large-scale data breach.