Heartland Payment Systems: Cybersecurity Impact on Audits and Financial Statement Contingencies

Abstract

ABSTRACT During the fiscal year 2008 financial reporting process, Heartland Payment Systems, Inc. experienced a breach of its operational data by international hackers and a U.S. Secret Service informant who returned to his criminal life as a hacker. As a result, Heartland's management assessed the data breach to determine both the immediate accounting and long-term operational impacts on the viability of the company. Similarly, Heartland's external auditors independently assessed the data breach for their audit of the company's financials. Using this case, students will apply their professional research skills through identifying appropriate accounting and auditing guidance, and use critical-thinking skills to evaluate the decisions made by the company, external auditors, and shareholders. Students will also evaluate the ethical implications of difficult judgmental decisions facing professional accountants by scrutinizing the activities of both financial statement preparers and auditors in the emerging area of cybersecurity. JEL Classifications: I21; M41; M42.