Poor cyber governance was warning of Macy’s downgrade


On Tuesday, S&P lowered its rating for Macy’s from BBB- to BB+—one notch below investment grade—saying it viewed the company’s turnaround plan as necessary, but also a sign that the department-store chain’s “competitive advantage has diminished more than we expected.”

S&P sees considerable execution risks as the company attempts to improve its position in a challenging brick-and-mortar retail sector. Profitability under the turnaround plan is weaker than its prior expectation.



According to Cyberhedge analysis, Macy’s, a traditional retailer fighting to stay relevant in an online shopping world, is under enormous competitive pressure to correctly execute its digital transformation plans—key to boosting sales and expanding margins. So far, likely due to financial constraints outlined in S&P’s downgrade decision, the company has consistently chosen to underinvest in adequate cybersecurity, resulting in poor performance on cyber governance (two embarrassing breach events in 2018 and 2019).

Companies that are poorly rated on cyber governance are at greater risk of credit downgrades. in December 2019, Cyberhedge issued a Cyber Governance Alert on Macy’s, which was rated one out of five stars on cyber financial metrics, because data showed the company had little margin for error in executing its digital strategy and allocating the capital necessary to effectively manage the downside risks of this transformation to compete with online retail giants.

We use cookies to make our website more user-friendly and effective

The Cyberhedge Indices Cookie Policy

What are the Cyberhedge Cyber Governance Indices?

These first ever benchmarks prove good cyber governance matters to shareholder value. They measure stock market performance of companies with good and with bad cyber governance scores. Scores are based on Cyberhedge’s proprietary cyber governance rating methodology. Market performance is tracked by an independent firm. The results show that companies with good cyber governance outperform their peers in US, UK, and EU markets.

Information that we collect

Here you can see and customize the information that we collect about you. To learn more, please read our privacy policy

Continue on website