Auditors' Response to Clients' Cyber Breaches: A Human‐Capital Perspective

Using online job postings data, we explore whether auditors adjust their human capital in response to clients' cyber breach incidents. We find that audit offices increase their demand for cybersecurity specialists after their clients' cyber breaches, implying that cyber breaches change not only client risk but also their auditor's production function. Consistent with expectations, we document that this impact is larger when breaches involve their own clients (rather than those of peer offices within the same audit firm) and when breaches directly involve financial information. Our evidence holds for both cyber‐focused and non‐cyber‐focused offices, highlighting the broad impact of cybersecurity risks on audit practices. Additionally, we find that audit offices with relatively high investment in cybersecurity human capital are better able to preserve their market share among clients in high‐cyber‐risk industries after a client's cyber breach.