Law firms are trained to say nothing until they know everything. In most legal work that instinct serves clients well. In a reputational crisis it can do more damage than the event itself, because silence gets filled quickly by speculation, often from people with less information and more motive.
Crises at law firms come in familiar forms: a cyber incident exposing client data, the sudden departure of a group of partners, allegations against a lawyer, a matter that attracts hostile coverage, or a regulatory issue. Each is different, but the first few hours follow a similar pattern.
The first four hours
- Establish the facts internally. What happened, what is known, what is not yet known, and who is affected. Write it down in one place.
- Decide who is in charge. A small group, usually the managing partner, general counsel and a communications lead, makes decisions. Everyone else knows who they are.
- Choose one spokesperson. All external questions go to them. Partners, associates and staff refer every enquiry, however friendly, to that person.
- Tell the people who matter first. Affected clients and your own staff should hear from you before they hear about it anywhere else.
- Issue a holding statement. Short and factual: what you know, what you are doing about it, and when you will say more.
What a good holding statement sounds like
It is calm, specific and human. It acknowledges the situation, explains the immediate steps being taken, shows concern for anyone affected and commits to a further update. It does not speculate, assign blame or minimise what has happened.
What to avoid
- Speculation. Anything said now that later turns out to be wrong will be remembered longer than the facts.
- Blame. Pointing at a vendor, a former colleague or a client rarely helps and often escalates.
- Minimising. Describing a serious event as minor destroys credibility when the truth emerges.
- Commenting on client matters. Professional confidentiality and the Bar Council's rules apply in a crisis exactly as they do on a quiet day.
- Going silent after the first statement. Regular, even brief, updates keep trust.
The days after
Once the immediate pressure passes, the work shifts to recovery: following through on commitments, communicating what has changed, and rebuilding confidence with the clients and staff most affected. A firm that handles a crisis openly and competently often ends up more trusted than before, because it has shown clients how it behaves under pressure.
Prepare before you need it
The single most useful thing a firm can do is prepare a one-page crisis protocol in advance. It should name the decision group and spokesperson, list the contact details of key people, set out who informs clients and staff, and include template holding statements for the most likely scenarios. It takes an afternoon to write and is worth more than any statement drafted in a panic.
For CA and CS firms
For CA and CS firms, the crisis is often a client's: a qualified opinion, a regulatory inquiry or a fraud that comes to light. Confidentiality limits what you can say, which makes a prepared holding statement and a single named spokesperson even more important.