User Compensation as a Data Breach Recovery Action: An Investigation of the Sony PlayStation Network Breach

To gather articles, we searched three literature databases of Scopus, ABI/Inform, and Google Scholar. We looked for all articles that contained various keywords, such as “data breach,” “security breach,” “privacy breach,” and “information breach.” We then narrowed our focus to include scholarly articles, excluding articles in the popular and practitioner media. Most of the articles identified in this step were conceptual. From this group, we collected all empirical studies of data breaches published in IS journals over the last 10 years, shown in Table A1. We adapted level of analysis categorizations from Smith et al. (2011) and Belanger and Crossler (2011). For each study, we also recorded the timing of the study to reflect the relationship between when the phenomenon occurred and when the study was conducted.