# Individual Differences in Psychological Stress Associated with Data Breach Experiences
## Appendix A Data Breach Severity Index (DBSI)  
\begin{tabular}{c c c} \hline \hline
**Score** & **Breach Extent** & **Sensitivity** & **Recovery** \\ \hline \multirow{4}{*}{\(1\)} & **Low**: credit card or debit card & **Low**: publicly available information; personal information of limited utility; Netflix or & **Low**: no financial loss; contact credit card \\  & **Low**: credit card or debit card & **Low**: publicly available information; personal information of limited utility; Netflix or & **company** to remove charges and cancel \\  & **deaked list**: **Netflix, gaming, or online shopping account. & **S**optiy access; gaming account; email address. & **card**; typical account recovery process; change passwords; remove credit card \\  & **The author’s defense**: & **Spotiy access; gaming account; email address. & **from online shopping account or delete** \\ \hline \multirow{4}{*}{\(2\)} & **Medium**: access to accounts with a multitude of information (e.g., email, Facebook or other social media, Equifax, health insurance provider breach); personal pictures; driver’s license; GPS tracking. a & **Medium**: small financial costs; requires more than minimal effort to recover (e.g., undo edits to social media account after retrieval; request new \(\text{SSN}/\text{SIN}\)); typical account recovery does not work (e.g., cannot recover SM account using recovery email); dispute with bank about fraudulent charges to credit or debit account. \\ \hline \multirow{4}{*}{\(3\)} & **High**: breach of multiple accounts (email, social media, financial, etc. ); multiple sources of personal information stolen; audio or video recordings; access to entire phone or computer. & **High**: permanent loss; cannot return to \"normal\"; significant financial loss; financial audit, safeguarding financial \\  & **The author’s defense**:  
* [4]Identity Theft Resource Center. 2023 Data Breach Report. Available online: [[https://www.idtheftcenter.org/publication/2023](https://www.idtheftcenter.org/publication/2023)]([https://www.idtheftcenter.org/publication/2023](https://www.idtheftcenter.org/publication/2023)) -data-breach-report/ (accessed on 14 July 2024). * [5]Office of the Privacy Commissioner of Canada, 2019. A Full Year of Mandatory Data Breach Reporting: What We've Learned and What Businesses Need to Know. Available online: [[https://www.priv.gc.ca/en/blog/20191031/](https://www.priv.gc.ca/en/blog/20191031/)]([https://www.priv.gc.ca/en/blog/20191031/](https://www.priv.gc.ca/en/blog/20191031/)) (accessed on 17 August 2024). * [6][PERSON]; [PERSON] Evaluating customer information breaches as service failures: An event study approach. _J. Serv. Res._**2010**, _14_, 44-59. [CrossRef]
* [7][PERSON]; [PERSON] The impact of repeated data breach events on organisations' market value. _Inf. Comput. Secur._**2016**, _24_, 73-92. [CrossRef]
* [8][PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON] Social media and stock price reaction to data breach announcements: Evidence from US listed companies. _Res. Int. Bus. Financ._**2019**, _47_, 458-469. [CrossRef]
* [9][PERSON]; [PERSON]; [PERSON] The impact of data breach severity on post-breach online shopping intention. _ICIS 2018 Proc._**2018**, _13_. Available online: [[https://aisel.aisnet.org/icis2018/security/Presentations/13](https://aisel.aisnet.org/icis2018/security/Presentations/13)]([https://aisel.aisnet.org/icis2018/security/Presentations/13](https://aisel.aisnet.org/icis2018/security/Presentations/13)) (accessed on 1 July 2024). * [10][PERSON]; [PERSON]; [PERSON] The effect of a data breach announcement on customer behavior: Evidence from a multichannel retailer. _J. Mark._**2018**, _82_, 85-105. [CrossRef]
* [11][PERSON]; [PERSON]; [PERSON] Data privacy: Effects on customer and firm performance. _[PERSON]_**2018**, _81_, 36-58. [CrossRef]
* [12][PERSON] Hackers Finally Post Stolen [PERSON] Data. 2015.