Economic Policy Review
When It Rains, It Pours: Cyber Vulnerability and Financial Conditions
Volume 31, Number 1
January 2025

JEL classification: G12, G21, G28

Authors: Thomas M. Eisenbach, Anna Kovner, and Michael Junho Lee

We analyze how systemic cyber risk relates to the financial cycle and show that the potential impact of a cyberattack is systematically greater during stressed financial conditions. This has been true over the past two decades, particularly at the onset of the COVID-19 pandemic, when changes in payment activity increased vulnerability by approximately 50 percent relative to the rest of 2020 through more concentration and intraday liquidity stress. We evaluate the effectiveness of policy interventions used to stabilize markets and mitigate cyber vulnerability. We argue that cyber and other financial shocks cannot be treated as uncorrelated vulnerabilities and policy solutions for cyber vulnerability need to be calibrated for adverse financial conditions.

Full Article
Author Disclosure Statement(s)
Thomas M. Eisenbach
The author declares that he has no relevant or material financial interests that relate to the research described in this paper.

Anna Kovner
The author declares that she has no relevant or material financial interests that relate to the research described in this paper.

Michael Junho Lee
The author declares that he has no relevant or material financial interests that relate to the research described in this paper.

Suggested Citation:
Thomas M. Eisenbach, Anna Kovner, and Michael Junho Lee. 2025. “When It Rains, It Pours: Cyber Vulnerability and Financial Conditions.” Federal Reserve Bank of New York Economic Policy Review 31, no. 1, January. https://doi.org/10.59576/epr.31.1.1-24

By continuing to use our site, you agree to our Terms of Use and Privacy Statement. You can learn more about how we use cookies by reviewing our Privacy Statement.   Close