Financial services are delivered almost exclusively online and cyber attackers have taken notice. We develop a principal-agent model with fee-paying clients who delegate security decisions to financial platforms that are subject to cyber attacks that steal data or assets. We derive testable...