EAGER: Consumer Response to Security Incidences and Data Breach Notification

尽管媒体对数据泄露和身份盗窃给予了高度关注，但人们对用户如何应对不利的安全事件知之甚少。有效的安全政策制定和坚定的响应至关重要地取决于用户在持有他们的数据的公司被入侵时如何反应。许多人认为，用户可能没有对安全事件或数据泄露给予足够的关注。他们可能会忽视公司的违规通知，特别是如果他们收到很多这样的通知，或者通知不够具体。即使当用户做出回应时，它也可能是微妙和微妙的，而且不容易衡量。该项目通过收集一个大型且唯一的现场数据集来检查用户对安全事件的反应。通过与一家大型金融机构合作，研究团队获得了美国不同地理位置六年多来50多万客户的详细数据。用户的反应可以从离开公司到厌恶基于互联网和移动的银行业务，再到改变采用其他银行服务。该项目将计量经济学技术与机器学习技术相结合，旨在识别由于不良安全事件或违规通知而导致的用户行为的行为变化程度。该研究团队的目标是评估用户反应如何受到用户特征(人口统计)、市场特征(竞争)和违规特征的影响。如果成功，这个项目可以回答各种各样的问题，这些问题可能被证明有助于公司如何成功地克服这种事件，以及政策制定者如何微调他们的政策。

Despite intense media attention on data breaches and identity thefts, very little is known about how users respond to adverse security events. Effective security policy making and firm response critically depends on how users respond when the firm holding their data is breached. Many argue that users may not pay adequate attention to security events or data breaches. They may ignore firms' breach notifications, especially if they receive many such notifications or when the notices are not specific enough. Even when users respond, it may be nuanced and subtle and not readily measured. This project examines users' responses to security events by assembling a large and unique field dataset. By collaborating with a large financial institution, the research team has access to detailed data for more than half million customers for more than six years spread over different geographies in the US. User response can range from leaving the firm to aversion to Internet and mobile based banking to changes in adopting other banking services. Combining econometrics techniques with machine learning techniques, this project aims to identify degree of behavior changes in user behavior due to an adverse security event or breach notification. The research team aims to estimate how the user response is conditioned by user characteristics (demographic), market characteristics (competition), and breach characteristics. If successful, this project could answer a wide variety of questions that may prove helpful for how firms can successfully overcome such events and how policy makers can fine tune their policy.