The healthcare field, abounding with lucrative patient data, attracts both internal and external adversaries. In this paper, we study the impact of data breaches on operational performance and identify how operational, technological, and market factors moderate the impact. We describe ex-post resilience strategies, look at institutional and operational approaches beyond security-specific factors, and shed light on critical nuances for IT strategies.

We find that while a breach negatively impacts hospital performance, its impact is most pronounced in the 3 years after a breach and diminishes in the subsequent years. From a technological perspective, our findings indicate that hospitals heavily reliant on cloud-based IT services experience more pronounced negative impacts.

To learn more about our findings and recommendations for hospital managers and policymakers, check out the paper!

Kwon, Juhee, and M Eric Johnson. “Unraveling the Impact of Data Breaches: Evidence From the US Healthcare Sector.” Production and Operations Management 34, no. 7 (2025): 1779–1798. Accessed October 15, 2025. https://journals.sagepub.com/doi/10.1177/10591478241305351.