The recent spate of cyberattacks against critical infrastructure systems have necessitated the quest to examine the impact of such events on stock values. The question is 'what is the impact of cyberattack on stock values'? To address the question, data on cyberattacks announcements from 96 firms that are listed on S&P 500 1 between January 03, 2013 and December 29, 2017 were reviewed to draw some conclusions. The empirical analysis was performed in two ways: cross-section and industry level. The study employs statistical tests that account for the effects of cross-section correlation in returns, returns series correlation, volatility changes, and skewness in the returns, indicating the following results: For cross-section analysis, the outcome shows that markets do not significantly react to cyberattacks for all the event windows except [-30, 30], while for the sector-level assessment, the analysis offers two main results. First, while some firms react to cyber-attacks for long event window for retail sector, there is no significant evidence of a cumulative firm reaction to cyberattacks for both short and long event windows for the industrial, information technology and health sectors. Second, there is a strong evidence of cumulative reaction to cyberattacks (i.e. for [-1, 1]) for the financial industry, and the reactions disappear for relatively longer event windows. These outcomes imply that (1) studying the cumulative effects of cyberattacks on prices of listed firms without grouping them into the various sectors may be non-informative, (2) the financial sector firms tend to react cumulatively to cyberattacks over a 3-day period than other sectors, (3) technology firms tend to be less reactive to the announcement of a data breach; possibly such firms could have the necessary tools and techniques to address large-scale cyberattacks.