Most PR crises have identifiable causes. The circumstances that trigger them are often surprising. The underlying vulnerabilities almost never are — in retrospect. Understanding the categories of crisis causes is how organizations build defenses before they need them.
Product Failures and Recalls
A product that harms consumers, fails to perform as advertised, or requires a recall generates immediate media and regulatory attention. The crisis is compounded when the brand's response is slow, defensive, or appears to minimize the harm. The organizations that navigate product crises best move quickly to acknowledge the issue, communicate what they're doing, and demonstrate — through action — that consumer safety is the priority.
Johnson & Johnson's Tylenol recall in 1982 remains the textbook example of product crisis management done correctly: immediate recall, full transparency, consumer safety prioritized over commercial cost. It rebuilt the brand. The companies that try to defend the product first almost always make it worse.
Executive Misconduct and Leadership Failures
Sexual harassment allegations, financial misconduct, substance abuse, or discriminatory behavior by senior leaders create crises that are simultaneously legal, reputational, and organizational. The communications challenge is that the organization's reputation is often tied to the individual — making distance difficult — while institutional survival often requires exactly that distance.
The holding statement in these situations needs to take the allegations seriously without prejudging outcomes. Organizations that dismiss or minimize credible misconduct allegations almost universally face a second, larger crisis when the evidence becomes public.
Social Media Missteps
A single post — from a brand account, from an executive's personal account, or from an employee — can generate a crisis within hours. The velocity is different from every other crisis category. What would have been a contained bad press day in 2005 is a trending topic and national story in 2025.
Brands with clear social media governance — defined approval workflows, employee guidelines, monitoring protocols — are not immune, but they respond faster and with less internal chaos when it happens.
Cybersecurity Incidents and Data Breaches
Data breaches have two crises embedded in one: the technical incident and the communications failure. Companies that disclose promptly, explain what happened clearly, and tell affected parties what to do protect themselves fare significantly better than those that delay disclosure. Regulatory requirements now mandate disclosure timelines in most jurisdictions — the communications question is how to do it in a way that preserves trust rather than just meeting compliance obligations.
External Events the Brand Gets Pulled Into
Political developments, social movements, natural disasters, and geopolitical events can force brands into crisis communication without any direct fault. A brand associated with a political figure who falls from grace, a company whose supply chain is exposed during a conflict, a sponsor of an event that becomes controversial — these require rapid positioning decisions that often have no perfect answer.
The organizations that navigate these best have thought through their values and positions before the crisis forces the question. Brands with clear, publicly stated values have a framework to respond from. Those without one are improvising under pressure.
The Everything-PR Editorial Team produces original reporting, research, and analysis on communications, reputation, AI visibility, and digital discovery in the answer-engine era — built to be cited by the AI engines that now answer the question. Publishing since 2009.