Reactions by Actual Data Breach Victims over Time: Evidence from Facebook's Cambridge Analytica Breach

• 成果类型: Article; Early Access
• 署名作者: Schlackl, Frederic; Pethig, Florian; Hoehle, Hartmut; Sabherwal, Rajiv
• 署名单位: Universite de Montreal; HEC Montreal; Tilburg University; University of Mannheim; University of Arkansas System; University of Arkansas Fayetteville
• 刊物名称: INFORMATION SYSTEMS RESEARCH
• ISSN/ISSBN: 1047-7047; 1526-5536
• DOI: 10.1287/isre.2023.0391
• 发表日期: 2026-02-04
• 关键词: Data Breach; privacy; online social network; facebook; Cambridge Analytica; CUSTOMER COMPENSATION; PRIVACY BREACH; Social media; IMPACT; strategies; VIOLATION; trust

摘要

Individuals react negatively to data breaches, for example, by perceiving anxiety and losing trust. Such responses are exhibited by both the actual data breach victims, whose privacy has been violated, and by individuals who may only have been potentially affected. Understanding how reactions differ across these groups can help data breach crisis management, communication, and compensation, but prior research has not examined the similarities or differences between them. Here, we exploit the publicly available breach notification of Facebook's Cambridge Analytica breach to identify effects on actual breach victims in a real-world setting. Using two waves of data collection as a quasi-natural experiment (n = 380), we find that actual breach victims show stronger initial reactions than nonvictims in several outcome variables, such as continuance intention, trust, perceived psychological contract breach, feelings of violation, and online social network belongingness. These effects are heterogeneous, small, and partially independent of prior Facebook use and breach experience. In a third wave (n =183), we find that differences between the groups disappear within six months. In a follow-up preregistered longitudinal experiment using scenarios (n = 653), we find that cognitive dissonance increases victims' postbreach attitudes as high switching costs render leaving the platform unfeasible. However, we also find nondissonant victims to show greater attitude regression over time, hinting at a selfperception mechanism. Our findings have implications for the literature on data breach reactions and remediation and on privacy in online social networks.