Talk Talk – how to turn a crisis into a PR disaster
Last week’s announcement from Talk Talk that its website had been hacked and customer details (including bank account information) had potentially been stolen has turned into a disaster for the company. The stock price slumped by over 10% and MPs have called for an inquiry into whether the firm’s failure to encrypt data put customer information at risk.
Could things have been handled differently – and would they have changed the reaction of both the public and the media?
Firstly, it is worth re-stating that Talk Talk has been the victim of a crime. Initial fanciful rumours that the perpetrators were Russian Jihadis now look wide of the mark, with the police instead arresting a 15 year old boy from Northern Ireland, but the fact remains that its site was hacked. Additionally some of the press coverage has been incredibly sensationalist, with lurid stories of customers having their bank accounts cleared out by fraudsters, even though they were not necessarily linked to the hack itself.
However there are two questions that any business involved in crisis management needs to answer – did it meet the expected standards before the incident, and did it then deal with the situation in a way that reassured customers and other stakeholders?
I’d say that the response to both of these is a No. For a start, failure to encrypt customer details (at a time when people like Apple encrypt everything) is a glaring security hole that should have been filled. But as a PR person I’d point out five ways they’ve not managed the crisis well:
1 Telling press before customers
The first thing most customers knew about the hack was when they turned on the news or listened to the radio. The reason given by chief executive Dido Harding for making contact through the media, as opposed to directly speaking to customers, was that the sheer number of subscribers made this impossible. Talk Talk should have done both – customers wanted a direct response rather than just hearing about it on Radio 4.
2 Incomplete information
You can’t blame Talk Talk for initially overstating the scale of the attack – it obviously needed to get the announcement of the hack out as quickly as possible, rather than laboriously go through all its account details to see what had been compromised. And the story about the afore-mentioned Russian Jihadis came from other sources. However it didn’t provide a full picture to its customers early enough. I’m an ex-Talk Talk customer, and left six months ago – yet nowhere on its FAQ did it say anything about whether my details were at risk. Much later on Talk Talk admitted that ex-customer information could also have been hacked, but it demonstrates that the entire response was not well thought through.
3 Failure to stay on top of the story
After its initial apology, the story seemed to be going Talk Talk’s way, with pundits talking about the growing threat of cyber crime, and the company’s clear advice to change passwords being repeated across all media. But then the story changed, with the initial hack being downplayed and the press focusing on the failure to encrypt data. As Jacques de Cock of the London School of Marketing pointed out, it seemed to share its customers’ panic, rather than taking decisive action. The agenda shifted against Talk Talk, positioning it as culpable in its own downfall and not having a handle on what was going on.
4 Poor reputation
As I mentioned, I’m an ex-Talk Talk customer, and I found it a frustrating and unhelpful organisation to deal with. I kept getting regular sales calls, with agents trying to upsell me from my basic package and when I moved home it made me honour a month’s notice period on my contract – even though it said it couldn’t provide service at my new address. The impression I got was of an organisation that didn’t care about its customers, except for the money it could make from them, and that cut corners where it could to save a pound or two. Indeed I remember hearing Dido Harding on the Media Show on Radio 4, likening the firm to a clapped-out car being driven over the speed limit down the motorway, hanging onto the competition. Very few telecoms firms deliver good customer service, but I’m convinced Talk Talk’s poor reputation meant that commentators and customers automatically assumed the worst had happened.
5 Lack of empathy
Compounding customer annoyance, Talk Talk yesterday said that it would charge a termination fee to any customers looking to leave, unless they could prove that money had been stolen from their accounts due to the hack. Now, Talk Talk is obviously a business, and releasing all its customers from their contractual obligations could cause a huge dent in revenues – particularly given how badly the crisis has been handled. But the way the message has been delivered smacks of weakness and arrogance – it is almost as if it believes that customers would seize any excuse to leave, yet are stupid enough to forget the whole hack happened when it comes to contract renewal time. The company should have worked out some sort of half way house, allowing customers to shorten contracts or pay a reduced termination fee as a goodwill gesture. It may have cost it more in the short term, but would have been a valuable first step in rebuilding the company’s reputation – and any good publicity would be welcome at this stage in the process.
Handling a crisis in today’s real-time world is difficult. The combination of continuous news, social media and a desire for instant scapegoats means it is impossible to control the story in the same way as in the past. However Talk Talk should have done better – and is now facing the prospect of real damage to its reputation and bottom line by failing to take decisive action or appearing to care about its customers. Every company should take note and update crisis management plans so that they don’t fall into the same trap.
1 Comment »
Why Revolutionary Measures?
Marketing is undergoing a revolution. The advent of social media provides the opportunity for one-to-one communication for the first time since the move to an industrial society. This blog will look at what this means for B2B PR and marketing, incorporating my own thoughts/rants and interests. Do let me know your feedback!
About meI'm Chris Measures and I've spent the last 18 years creating and implementing PR and marketing campaigns for technology companies. I've worked with everyone from large quoted companies to fast growth start-ups, giving me unrivalled experience and ideas. I'm now director of Measures Consulting, an agency that uses this expertise to deliver PR and marketing success for technology businesses.
- The YouTube advertising storm - and why this could just be the start of an advertiser backlash… twitter.com/i/web/status/8… 2 days ago
- BBC News - Uber pledges to make drivers happier bbc.co.uk/news/technolog… 2 days ago
- RT @prweekuknews: Do you send unsolicited emails to journalists? You could have a big problem: bit.ly/2n17t5H #pr #comms https://t… 2 days ago
- RT @CMRLee: This word will come in very handy... twitter.com/susie_dent/sta… 4 days ago
- RT @fttechnews: M&S pulls advertising from YouTube over extremist videos on.ft.com/2ndd4oR 4 days ago
advertising Amazon Android Apple ARM Artificial intelligence Autonomy Barack Obama BBC BBC Micro Business Cambridge Cambridgeshire Cambridge University CfEL Chris Measures Communications Creativity Crossing the Chasm Daily Mail David Cameron Digital Donald Trump Ed Miliband Edward Snowden Entrepreneur European Union Facebook FIFA Google government IBM Idea Transform innovation Intel internet Internet of Things iPad IPhone Journalism Journalist LinkedIn London Malcolm Tucker marketing Mark Zuckerberg Measures Consulting Microsoft mobile MySpace Nick Clegg Nigel Farage Nokia Norwich PR Privacy Public Relations Raspberry Pi Silicon Fen Silicon Valley Smartphone social media Social network Starbucks startup Tech City Technology The Economist The Times twitter United States WhatsApp World Cup YouTube ZX Spectrum
Site infoRevolutionary Measures
Create a free website or blog at WordPress.com.