{"id":"https://openalex.org/W4410019695","doi":"https://doi.org/10.1287/isre.2024.1160","title":"\u201cExtortionality\u201d in Ransomware Attacks: A Microeconomic Study of Extortion and Externality","display_name":"\u201cExtortionality\u201d in Ransomware Attacks: A Microeconomic Study of Extortion and Externality","publication_year":2025,"publication_date":"2025-05-02","ids":{"openalex":"https://openalex.org/W4410019695","doi":"https://doi.org/10.1287/isre.2024.1160"},"language":"en","primary_location":{"id":"doi:10.1287/isre.2024.1160","is_oa":false,"landing_page_url":"https://doi.org/10.1287/isre.2024.1160","pdf_url":null,"source":{"id":"https://openalex.org/S202812398","display_name":"Information Systems Research","issn_l":"1047-7047","issn":["1047-7047","1526-5536"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310315699","host_organization_name":"Institute for Operations Research and the Management Sciences","host_organization_lineage":["https://openalex.org/P4310315699"],"host_organization_lineage_names":["Institute for Operations Research and the Management Sciences"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Systems Research","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061459812","display_name":"Debabrata Dey","orcid":"https://orcid.org/0000-0001-5290-0578"},"institutions":[{"id":"https://openalex.org/I146416000","display_name":"University of Kansas","ror":"https://ror.org/001tmjg57","country_code":"US","type":"education","lineage":["https://openalex.org/I146416000"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Debabrata Dey","raw_affiliation_strings":["KU School of Business, University of Kansas, Lawrence, Kansas 66045"],"raw_orcid":"https://orcid.org/0000-0001-5290-0578","affiliations":[{"raw_affiliation_string":"KU School of Business, University of Kansas, Lawrence, Kansas 66045","institution_ids":["https://openalex.org/I146416000"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041703192","display_name":"Atanu Lahiri","orcid":"https://orcid.org/0000-0003-3174-8014"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Atanu Lahiri","raw_affiliation_strings":["Jindal School of Management, University of Texas, Dallas, Texas 75080","Jindal School of Management, University of Texas, Dallas,  Texas 75080"],"raw_orcid":"https://orcid.org/0000-0003-3174-8014","affiliations":[{"raw_affiliation_string":"Jindal School of Management, University of Texas, Dallas, Texas 75080","institution_ids":[]},{"raw_affiliation_string":"Jindal School of Management, University of Texas, Dallas,  Texas 75080","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5061459812"],"corresponding_institution_ids":["https://openalex.org/I146416000"],"apc_list":null,"apc_paid":null,"fwci":1.9105,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.8605789,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"37","issue":"1","first_page":"20","last_page":"43"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.9805785417556763},{"id":"https://openalex.org/keywords/extortion","display_name":"Extortion","score":0.9104934930801392},{"id":"https://openalex.org/keywords/externality","display_name":"Externality","score":0.7750915288925171},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.45979875326156616},{"id":"https://openalex.org/keywords/industrial-organization","display_name":"Industrial organization","score":0.3815818130970001},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.37484210729599},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.374271959066391},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.3483874797821045},{"id":"https://openalex.org/keywords/microeconomics","display_name":"Microeconomics","score":0.3042338490486145},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.2833009362220764},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.08632159233093262}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9805785417556763},{"id":"https://openalex.org/C2779066997","wikidata":"https://www.wikidata.org/wiki/Q6452087","display_name":"Extortion","level":2,"score":0.9104934930801392},{"id":"https://openalex.org/C16118543","wikidata":"https://www.wikidata.org/wiki/Q275372","display_name":"Externality","level":2,"score":0.7750915288925171},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45979875326156616},{"id":"https://openalex.org/C40700","wikidata":"https://www.wikidata.org/wiki/Q1411783","display_name":"Industrial organization","level":1,"score":0.3815818130970001},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.37484210729599},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.374271959066391},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.3483874797821045},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.3042338490486145},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2833009362220764},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.08632159233093262},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1287/isre.2024.1160","is_oa":false,"landing_page_url":"https://doi.org/10.1287/isre.2024.1160","pdf_url":null,"source":{"id":"https://openalex.org/S202812398","display_name":"Information Systems Research","issn_l":"1047-7047","issn":["1047-7047","1526-5536"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310315699","host_organization_name":"Institute for Operations Research and the Management Sciences","host_organization_lineage":["https://openalex.org/P4310315699"],"host_organization_lineage_names":["Institute for Operations Research and the Management Sciences"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Systems Research","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W28655942","https://openalex.org/W1533714622","https://openalex.org/W1985207306","https://openalex.org/W2028333711","https://openalex.org/W2033687483","https://openalex.org/W2039104542","https://openalex.org/W2045006695","https://openalex.org/W2052176782","https://openalex.org/W2053924964","https://openalex.org/W2056075452","https://openalex.org/W2058012887","https://openalex.org/W2058080502","https://openalex.org/W2112545240","https://openalex.org/W2115904533","https://openalex.org/W2117405938","https://openalex.org/W2119406282","https://openalex.org/W2122383909","https://openalex.org/W2125639892","https://openalex.org/W2139828324","https://openalex.org/W2141508219","https://openalex.org/W2144958981","https://openalex.org/W2177864412","https://openalex.org/W2177986285","https://openalex.org/W2201134306","https://openalex.org/W2288890063","https://openalex.org/W2491528117","https://openalex.org/W2523006605","https://openalex.org/W2584400745","https://openalex.org/W2617664835","https://openalex.org/W2659232873","https://openalex.org/W2767588290","https://openalex.org/W2902621595","https://openalex.org/W2948913639","https://openalex.org/W2955105517","https://openalex.org/W3024755729","https://openalex.org/W3123365097","https://openalex.org/W3132588576","https://openalex.org/W3141119712","https://openalex.org/W3190759820","https://openalex.org/W3197725237","https://openalex.org/W3214755516","https://openalex.org/W4220970108","https://openalex.org/W4249092732","https://openalex.org/W4322505540","https://openalex.org/W4366447842","https://openalex.org/W4388323213","https://openalex.org/W4390064573","https://openalex.org/W4397012138","https://openalex.org/W4402056280"],"related_works":["https://openalex.org/W3178261856","https://openalex.org/W2886257824","https://openalex.org/W3010504543","https://openalex.org/W4406752207","https://openalex.org/W4400811107","https://openalex.org/W4232551112","https://openalex.org/W4405939430","https://openalex.org/W4409766150","https://openalex.org/W3209947356","https://openalex.org/W3009452534"],"abstract_inverted_index":{"Practice-":[0],"and":[1,26,91,126,193,198,203],"Policy-Oriented":[2],"Abstract":[3],"Ransomware":[4],"attacks":[5],"have":[6],"emerged":[7],"as":[8,103,162],"one":[9],"of":[10,41,59,112,190],"the":[11,32,39,110,113,117,136,145,173,178],"biggest":[12],"threats":[13],"to":[14,23,34,64,87,144,156,176,201],"cybersecurity.":[15],"Faced":[16],"with":[17],"business":[18],"disruptions,":[19],"many":[20],"organizations":[21],"accede":[22],"ransom":[24,131],"demands,":[25],"in":[27,71,148],"doing":[28],"so,":[29],"they":[30,141],"embolden":[31],"attackers":[33,137],"launch":[35],"more":[36],"attacks,":[37],"elevating":[38],"chance":[40],"a":[42,52,62,72,84,104,127,149,163,168,184],"future":[43,80],"breach":[44],"for":[45,79,186,196],"others.":[46],"We":[47],"study":[48],"this":[49,89],"externality":[50],"using":[51],"multiperiod":[53],"game":[54],"among":[55],"multiple":[56],"firms,":[57],"each":[58],"which":[60],"has":[61],"choice":[63],"pay":[65,68],"or":[66,98],"not":[67,120],"if":[69],"breached":[70],"particular":[73],"period,":[74],"its":[75],"action":[76],"having":[77],"implications":[78],"periods.":[81],"How":[82],"should":[83],"policymaker":[85],"intervene":[86],"mitigate":[88,177],"externality,":[90],"is":[92,119,133],"prohibition":[93,129,170],"necessary?":[94],"What":[95],"might":[96,101],"work":[97,102],"how":[99],"it":[100],"policy":[105,164,191],"tool":[106],"depends":[107],"critically":[108],"on":[109,130],"behavior":[111],"attacker":[114,118],"(extortionist).":[115],"If":[116,135],"strategic,":[121,139],"fiscal":[122,159],"interventions":[123,192],"could":[124,152],"work,":[125],"complete":[128],"payment":[132],"unnecessary.":[134],"are":[138],"though,":[140],"may":[142,171],"respond":[143],"policymaker\u2019s":[146],"tax/subsidy":[147],"manner":[150],"that":[151],"increase":[153],"victims\u2019":[154],"propensity":[155],"pay,":[157],"rendering":[158],"intervention":[160],"ineffective":[161],"lever.":[165],"In":[166],"such":[167],"case,":[169],"be":[172],"only":[174],"way":[175],"externality.":[179],"Overall,":[180],"our":[181],"analysis":[182],"provides":[183],"framework":[185],"comparing":[187],"different":[188],"types":[189],"raises":[194],"concerns":[195],"policymakers":[197],"social":[199],"planners":[200],"pause":[202],"ponder.":[204]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-10T00:00:00"}