This paper investigates users’ reactions to a massive and highly sensitive data breach via an array of causal inference methodologies.