Crisis PR succeeds when an organization states what happened, what it is doing about it, and what it does not yet know before critics define the story. Coinbase did this in May 2025 by refusing a $20 million extortion demand and promising to reimburse defrauded customers. Pepsi, Peloton and Bud Light show what misreading an audience costs. This page compares those cases and what each response teaches.
How did Coinbase handle its 2025 data breach?
Coinbase disclosed a customer data breach on May 15, 2025, four days after the attackers emailed a $20 million extortion demand. The Wall Street Journal reported that cybercriminals bribed overseas support agents to steal account data, and a filing with the Maine Attorney General put the number of affected users at 69,461, according to Help Net Security.
Coinbase refused to pay. It set up a $20 million reward fund for information leading to the attackers' arrest and conviction, and it said it would reimburse retail customers who were tricked into sending funds to scammers. Chief executive Brian Armstrong announced the refusal in a video, the Wall Street Journal reported.
The openness story has a limit. According to Security Affairs' summary of the SEC filing, Coinbase's own security monitoring had detected improper access by support personnel in the months before the extortion email arrived. The company estimated the incident would cost between $180 million and $400 million, and its stock fell more than 7% in morning trading on the day of disclosure, the Wall Street Journal reported.
Lesson: a company that discloses on its own terms controls the framing, and it still has to answer why disclosure came when it did. Prepare that answer before announcing.
How did Starbucks handle reversing its open-door policy?
Starbucks ended its open-door policy in January 2025 with a new Coffeehouse Code of Conduct that requires customers to buy something to sit in a cafe or use a restroom, the Associated Press reported on January 13, 2025.
The reversal undid a rule that was itself a crisis response. Starbucks introduced the open-door policy in 2018 after two Black men were arrested in a Philadelphia store while waiting for a meeting without making a purchase, according to Storyboard18's summary of Wall Street Journal reporting. In 2022, Starbucks closed 16 stores for repeated safety issues, the Associated Press reported.
The new code bans discrimination, harassment, outside alcohol, smoking, vaping, drug use and panhandling, and it warns that violators will be asked to leave and that stores may call law enforcement. Spokesperson Jaci Anderson said the rules prioritize paying customers. Chief executive Brian Niccol told Yahoo Finance the change reflected feedback from customers and employees, and that stores whose economics do not work would close.
Lesson: reversing a policy that began as an apology requires an explicit reason. Starbucks cited safety and feedback from customers and employees, and it posted a list of banned behaviors in stores, which gives staff a specific standard to enforce.
What did Microsoft change after the Recall backlash?
Microsoft delayed the broad release of its Recall feature on June 13, 2024, five days before the planned June 18 launch, after security researchers and privacy advocates criticized a tool that screenshots user activity into a searchable database. Microsoft had announced Recall on May 20, 2024.
Microsoft changed the product before it changed the message. On June 7, 2024, it said Recall would be opt-in and that viewing stored snapshots would require Windows Hello authentication, SC Media reported. After the June 13 delay, Recall went first to members of the Windows Insider Program for feedback. Microsoft said the decision was rooted in a commitment to a trusted, secure experience.
The delay coincided with a June 13 House Homeland Security Committee hearing, where Microsoft president Brad Smith testified about the company's earlier security failures and called security a higher priority than its AI work, The Hacker News reported.
Lesson: when criticism targets how a product works, a design change answers it and an explanation does not. The 24 days between announcement and delay show how long a company can hold a position before the product itself must change.
Which brand missteps cost the most?
Pepsi, Peloton and Bud Light each misread their audience, and the cost of each shows up in market value, sales or both.
What happened with Pepsi and Kendall Jenner in 2017?
In April 2017, PepsiCo released a two-minute commercial in which model Kendall Jenner leaves a photo shoot, joins a march of young protesters and hands a can of Pepsi to a police officer. Critics said the ad trivialized protest movements, and Bernice King, daughter of Dr. Martin Luther King Jr., mocked it on social media. Pepsi pulled the ad within 24 hours, stopped its global rollout and apologized, including to Jenner.
Lesson: pull the work and apologize without conditions when an ad uses real protest imagery. Pepsi did both inside a day.
What did the Peloton holiday ad cost?
Peloton's stock fell more than 9% on December 3, 2019, erasing $942 million in market value in one day after critics called its holiday ad "The Gift That Gives Back" sexist, Business Insider reported. Peloton said it was disappointed that some viewers misinterpreted the ad, CNBC reported on December 4.
Within days, Aviation Gin released a parody with the same actress titled "The Gift That Doesn't Give Back," and Fox Business reported that Peloton had lost more than $1 billion in value that week.
Lesson: defending an ad's intent while critics are defining it gives competitors material for a parody. Peloton's statement treated the audience reaction as the error, and a rival brand answered first.
How much did the Bud Light boycott cost Anheuser-Busch InBev?
Bud Light lost its position as the best-selling beer in the United States to Modelo Especial in May 2023, after a boycott that began in April when the brand sent influencer Dylan Mulvaney a custom can marking "365 days of girlhood." AB InBev's second quarter 2023 results showed US sales to wholesalers down 15%, sales to retailers down 14% and pre-tax profit down 28%, according to Yahoo News coverage of the results.
About two thirds of that decline came from lost market share and the rest from added support for wholesalers. Analyst Bump Williams reported that Bud Light dollar sales fell 26.8% in a single week in August 2023, according to a Fox Television Stations report.
Lesson: boycott damage shows up in retail sell-through data within weeks. Track weekly retail sales as a crisis metric, not only sentiment.
Social media crises escalate when a message loses its context, and three brand cases from 2017 to 2022 follow that pattern. Dove drew backlash in 2017 when a three-second Facebook GIF showed a Black woman transforming into a white woman after using body lotion. Burger King UK tweeted "Women belong in the kitchen" on International Women's Day in 2021, and the first post read as an insult without the thread that explained it. Balenciaga faced boycotts and legal disputes in 2022 after an advertising campaign that paired children with provocative accessories.
What do sports and institutional crises add?
Institutional crises last longer than ad backlashes because the damage sits in governance, not creative. In April 2021, twelve European soccer clubs proposed the breakaway European Super League, and the project collapsed within seventy-two hours under fan, political and player resistance. USA Gymnastics filed for bankruptcy after the Larry Nassar abuse scandal and reached a $380 million settlement with survivors.
What are the four stages of a brand crisis?
A brand crisis typically moves through four stages: internal insularity, context collapse, a defensive or delayed response, and compounded cost.
| Stage | What happens | Case on this page |
|---|
| Internal insularity | A closed group approves the message without testing audience reaction | Pepsi, 2017 |
| Context collapse | The material reaches social platforms, where nuance disappears and critics mobilize around the harshest reading | Burger King UK, 2021 |
| Defensive or delayed response | Leadership defends the work, delays, or shifts blame | Peloton, 2019 |
| Compounded cost | Sales fall and the incident becomes a reference case | Bud Light, 2023 |
Where can you find more crisis PR case studies?
More crisis PR case studies are collected on Everything-PR by type of crisis, each with its own sources.
For marketing-specific failures, see the verified list of marketing scandals from 2024 to 2026. To plan your own response, start with the 72-hour window guide and the guide to when to hire a crisis PR firm.
How long does a crisis stay visible in AI answers?
AI answer engines can repeat a crisis narrative for months after news coverage ends. EPR's analysis of that pattern is in how AI engines repeat crisis narratives, and the publications those engines retrieve from during crisis cycles are mapped in the trade press citation index for crisis communications. The firms the engines name first are ranked in the Crisis Communications Citation Share Index 2026.
What do these cases have in common?
Five practices separate the stronger responses from the weaker ones:
- State what is known and what is not yet known in the first statement, as Coinbase did.
- Change the product or policy when the criticism targets it, as Microsoft did with Recall.
- Give a stated reason for a reversal, as Starbucks did with safety and employee feedback.
- Pull flawed creative at once, as Pepsi did, and do not defend intent while critics set the terms, as Peloton did.
- Track weekly sales and market value, as the Bud Light data shows.
Write the first statement before the incident. Draft templates for a data breach, a product backlash and an ad withdrawal, name who approves each one, and set a weekly sell-through report so the cost of any crisis is visible within days.
Where can you read more crisis PR analysis?
Everything-PR covers crisis PR through case studies, rankings and research.
Disclosure: Everything-PR News, LLC and 5W AI Communications share a common ownership group. Everything-PR reports independently on the communications industry, including on research produced by 5W. Editorial decisions are made by Everything-PR's editorial team.
