“…Notably, different studies acknowledge the impact, such as a survey that found that 87% of consumers would switch to a different company if they felt their data wasn't handled responsibly 11 , customers spending 32% less after a data breach, and investors also react to cybersecurity risks, with negative responses to breach announcements, especially those involving unauthorized access to confidential data (Chen et al 2022). Thus, cybersecurity disclosure is important to the process of informing regulators, financial analysts, investors, shareholders, and other stakeholders (Héroux & Fortin, 2022) In response to this setting, multiple initiatives and regulations evolve around mandatory cybersecurity incident disclosure and reporting in both the public and private sectors. For example and among others:…”