{
  "id": 7732128,
  "title": "The economics of cyber risk",
  "url": "https://urgent.news/2026/09/16/the-economics-of-cyber-risk",
  "topic": "finance",
  "section": "Finance & Markets",
  "published": "2026-09-16T07:30:24.000Z",
  "source": {
    "name": "Marginal Revolution",
    "slug": "marginal-revolution",
    "url": "https://marginalrevolution.com/marginalrevolution/2026/09/the-economics-of-cyber-risk.html"
  },
  "original_language": "en",
  "account": "A recent study explores the economic implications of cyber risk, revealing that larger firms face a higher risk of cyberattacks, but are also more likely to invest in protective measures. The model demonstrates an inverse relationship between firm size and attack risk, aligning with empirical data. Unfortunately, imposing cyber risk measures could lead to a reduction in firm entry, productivity, and overall output. These consequences stem from broader economic adjustments, such as changes in firm entry and size, as well as spillover effects, which are not captured in conventional partial-equilibrium analyses.\n\nThe research underscores the stark contrast between policy responses to cyber risk. Well-crafted subsidies and minimum cybersecurity standards have the potential to enhance aggregate output, whereas bailouts may have the opposite effect by lowering it. While the paper does not focus on artificial intelligence, it may serve as a foundation for estimating the potential costs of future AI-driven cyberattacks. The authors emphasize the need for further investigation in this area and express hope that the subfield will gain greater prominence in the near future.",
  "summary": "From Aniket Baksy and Daniele Caratelli, here is part of the abstract: Because larger firms are more attractive targets but also invest more in protection, the model generates an inverse-U relationship between firm size and attack risk, consistent with the data. Introducing cyber risk reduces firm entry by 3.6 percent, aggregate productivity by 0.6 percent, […] The post The economics of cyber…",
  "key_points": [
    "Larger firms face higher cyberattack risk but invest more in protection",
    "Cyber risk measures could reduce firm entry, productivity, and output",
    "Subsidies and standards may boost aggregate output, bailouts may lower it"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}