---
title: 4 Crisis Communication Lessons from Heartbleed
description: Crisis communication lessons in a hyper-connected world where panic spreads like brush fire. Whatever the crisis, here's how to handle it.
image: https://www.readynorth.com/hs-fs/hub/883/file-1301626798.png
---

[Skip to content](https://www.readynorth.com/blog/4-crisis-communication-lessons-from-heartbleed#main-content)

 Close

- Industries
  
  
  
  
  
    - [Manufacturing](https://www.readynorth.com/industries/manufacturing)
    - [Professional Services](https://www.readynorth.com/industries/professional-services)
    - [Associations](https://www.readynorth.com/industries/associations)
    - [Other](https://www.readynorth.com/industries/other)
- HubSpot
  
  
  
  
  
    - [Our Approach](https://www.readynorth.com/hubspot/our-hubspot-approach)
    - [Marketing Hub](https://www.readynorth.com/hubspot/marketing-hub/)
    - [Sales Hub](https://www.readynorth.com/hubspot/sales-hub)
    - [Service Hub](https://www.readynorth.com/hubspot/service-hub)
    - [CMS Hub](https://www.readynorth.com/hubspot/cms-hub)
    - [Integrations](https://www.readynorth.com/hubspot/integrations)
- Digital Marketing
  
  
  
  
  
    - [Foundational Strategy](https://www.readynorth.com/digital-marketing/foundational-strategy/)
    - [Content Marketing](https://www.readynorth.com/digital-marketing/content-marketing)
    - [Lead Generation](https://www.readynorth.com/digital-marketing/lead-generation)
    - [Website Optimization](https://www.readynorth.com/digital-marketing/website-optimization)
    - [Reporting](https://www.readynorth.com/digital-marketing/reporting)
- [Pricing](https://www.readynorth.com/point-pricing)
- Resources
  
  
  
  
  
    - [Guides](https://www.readynorth.com/resources/guides)
    - [Blog](https://www.readynorth.com/blog)

SEARCH

CONTACT

E-MAIL: [info@readynorth.com](mailto:info@readynorth.com)

[GET STARTED](https://www.readynorth.com/contact-us)

[![Ready North (RN) Logo_BlueOrange_Trademark](https://www.readynorth.com/hs-fs/hubfs/Ready%20North%20(RN)%20Logo_BlueOrange_Trademark.png?width=800&height=269&name=Ready%20North%20(RN)%20Logo_BlueOrange_Trademark.png)![Ready North Logo_AllWhite-1](https://www.readynorth.com/hs-fs/hubfs/Ready%20North%20Logo_AllWhite-1.png?width=1078&height=363&name=Ready%20North%20Logo_AllWhite-1.png)](https://www.readynorth.com/)

- Industries
  
  
  
  
  
    - [Manufacturing](https://www.readynorth.com/industries/manufacturing)
    - [Professional Services](https://www.readynorth.com/industries/professional-services)
    - [Associations](https://www.readynorth.com/industries/associations)
    - [Other](https://www.readynorth.com/industries/other)
- HubSpot
  
  
  
  
  
    - [Our Approach](https://www.readynorth.com/hubspot/our-hubspot-approach)
    - [Marketing Hub](https://www.readynorth.com/hubspot/marketing-hub/)
    - [Sales Hub](https://www.readynorth.com/hubspot/sales-hub)
    - [Service Hub](https://www.readynorth.com/hubspot/service-hub)
    - [CMS Hub](https://www.readynorth.com/hubspot/cms-hub)
    - [Integrations](https://www.readynorth.com/hubspot/integrations)
- Digital Marketing
  
  
  
  
  
    - [Foundational Strategy](https://www.readynorth.com/digital-marketing/foundational-strategy/)
    - [Content Marketing](https://www.readynorth.com/digital-marketing/content-marketing)
    - [Lead Generation](https://www.readynorth.com/digital-marketing/lead-generation)
    - [Website Optimization](https://www.readynorth.com/digital-marketing/website-optimization)
    - [Reporting](https://www.readynorth.com/digital-marketing/reporting)
- [Pricing](https://www.readynorth.com/point-pricing)
- Resources
  
  
  
  
  
    - [Guides](https://www.readynorth.com/resources/guides)
    - [Blog](https://www.readynorth.com/blog)

E-MAIL: [info@readynorth.com](mailto:info@readynorth.com)

[GET STARTED](https://www.readynorth.com/contact-us)

Quick results for "{search\_term}"

![Ready North Who We Serve](https://www.readynorth.com/hs-fs/hubfs/2023%20Website%20Redesign/Ready%20North%20Who%20We%20Serve.png?width=300&name=Ready%20North%20Who%20We%20Serve.png)

#### We Love Clients with High Growth Goals

We primarily work with clients in the manufacturing / industrial, professional services, and association industries. 

Don't fit in the industries listed above? We've got you covered! Reach out and let's talk about how we can work on an ongoing or project basis.

[![CONTACT US](https://no-cache.hubspot.com/cta/default/883/2124f3a9-c8c1-4f96-b962-17c82254cc07.png)](https://cta-redirect.hubspot.com/cta/redirect/883/2124f3a9-c8c1-4f96-b962-17c82254cc07)

#### WHO WE SERVE

- [Manufacturing](https://www.readynorth.com/industries/manufacturing)
- [Professional Services](https://www.readynorth.com/industries/professional-services)
- [Associations](https://www.readynorth.com/industries/associations)
- [Other](https://www.readynorth.com/industries/other)

![HubSpot Mega Menu V2](https://www.readynorth.com/hs-fs/hubfs/2023%20Website%20Redesign/HubSpot%20Mega%20Menu%20V2.png?width=300&name=HubSpot%20Mega%20Menu%20V2.png)

#### See What’s Possible with HubSpot and Ready North

We drive growth and make impactful change in our clients’ marketing, sales, and service programs with HubSpot. From onboarding to optimization and all the steps in between, our team has you covered.

#### HUBS WE SERVE

- [Our Approach](https://www.readynorth.com/hubspot/our-hubspot-approach)
- [Marketing Hub](https://www.readynorth.com/hubspot/marketing-hub/)
- [Sales Hub](https://www.readynorth.com/hubspot/sales-hub)
- [Service Hub](https://www.readynorth.com/hubspot/service-hub)
- [CMS Hub](https://www.readynorth.com/hubspot/cms-hub)
- [Integrations](https://www.readynorth.com/hubspot/integrations)

![Services Hub 3 (3)](https://www.readynorth.com/hs-fs/hubfs/2023%20Website%20Redesign/Services%20Hub%203%20(3).jpg?width=300&name=Services%20Hub%203%20(3).jpg)

#### Customized Marketing Solutions

Your business is unique. Each service is designed entirely around your challenges and goals. See how you can establish a personalized marketing plan, based on your definition of success.

#### DIGITAL MARKETING SERVICES

- [Foundational Strategy](https://www.readynorth.com/digital-marketing/foundational-strategy/)
- [Content Marketing](https://www.readynorth.com/digital-marketing/content-marketing)
- [Lead Generation](https://www.readynorth.com/digital-marketing/lead-generation)
- [Website Optimization](https://www.readynorth.com/digital-marketing/website-optimization)
- [Reporting](https://www.readynorth.com/digital-marketing/reporting)

![mountain_canva_2](https://www.readynorth.com/hs-fs/hubfs/2023%20Website%20Redesign/mountain_canva_2.jpg?width=300&name=mountain_canva_2.jpg)

#### [Learn From the Experts](https://www.readynorth.com/blog)

We’re not shy about sharing our knowledge, expertise, and actionable insights you can use to improve your performance. Check out our blog for the latest in what’s new in the world of marketing.

[VIEW BLOG](https://www.readynorth.com/blog)

#### [Digital Marketing Resources](https://www.readynorth.com/resources/guides)

We are committed to advancing the industry through collaboration. Check out our resource center filled with templates, tools, ebooks, and more.

[GET RESOURCES](https://www.readynorth.com/resources/guides)

![](https://www.readynorth.com/hs-fs/hub/883/file-1301626798.png/Screen_Shot_2014-04-15_at_12.54.47_PM-process-s475x198.png.png?width=300&name=Screen_Shot_2014-04-15_at_12.54.47_PM-process-s475x198.png)

[Taylor Radey](https://www.readynorth.com/blog/author/taylor-radey)April 16, 20143 min read

# 4 Crisis Communication Lessons from Heartbleed

[Previous](https://www.readynorth.com/blog/6-ways-to-ruin-your-next-media-pitch)

<https://www.readynorth.com/blog>

[Next](https://www.readynorth.com/blog/3-ways-to-spice-up-b2b-content-with-examples)

If you have online accounts, you’ve likely received an onslaught of communications about Heartbleed, a serious vulnerability in the popular OpenSSL cryptographic software library. The bug, which allows for the stealing of information normally protected by SSL/TLS encryption, was brought to light when almost simultaneously discovered by security firm Codenomicon ([@CodenomiconLTD](https://twitter.com/CodenomiconLTD)) and Google researcher Neel Mehta ([@neelmehta](https://twitter.com/neelmehta)).

(For more on Heartbleed, see the [Codenomicon-created educational site](http://heartbleed.com/) and [this CNET FAQ](http://www.cnet.com/news/heartbleed-bug-what-you-need-to-know-faq/).)

But Heartbleed also offers important **crisis communication lessons to marketers that are extremely applicable in a hyper-connected world where panic spreads like brush fire.** Whatever the crisis, here's how to handle it.

## Lesson 1: Time is of the Essence

Whether a security breach, product recall or other major concern, your reaction time is critical. Do not wait until the perfectly crafted response is complete or every piece of information has been gathered—**act.**

![Evernote Heartbleed Blog Post](https://www.readynorth.com/hs-fs/hub/883/file-1301606783.png?width=450&height=375&name=file-1301606783.png "Evernote Heartbleed Blog Post")

HubSpot's ([@hubspot](https://twitter.com/hubspot)) [300-word post](http://blog.hubspot.com/customers/hubspot-and-the-heartbleed-security-vulnerability) wasn't elaborate (and [Evernote's was a mere 109](http://blog.evernote.com/blog/2014/04/10/evernote-service-unaffected-openssl-bug/)—see above), **but they got the job done.** Both addressed the problem head-on, and gave customers clear and transparent insight into what the companies had learned, what they were doing to resolve the problem, and what steps (if any) recipients needed to take. 

## Lesson 2: Cover All Your Bases

Consumers have an ever-widening array of channels to learn about and engage with your company. And when trouble occurs, they'll turn to all of them. **Leave no stone unturned: Communicate on every outlet available to you. **

Cloud-based password manager LastPass ([@LastPass](https://twitter.com/lastpass)) came out of this ordeal looking better than ever. The company sent an email to all its customers reassuring the security of LastPass and linking to a blog post with more information. 

![LastPass Heartbleed Crisis Communication Email](https://www.readynorth.com/hs-fs/hub/883/file-1303102896.png?width=445&height=339&name=file-1303102896.png "LastPass Heartbleed Crisis Communication Email")

[The blog post](http://blog.lastpass.com/2014/04/lastpass-and-heartbleed-bug.html) gave more detailed information on the breach itself, and what it means for LastPass users. LastPass used its Twitter account to drive users to the blog post, and to communicate updates. 

![LastPass Heartbleed Crisis Communication Tweet](https://www.readynorth.com/hs-fs/hub/883/file-1303102906.png?width=550&height=94&name=file-1303102906.png "LastPass Heartbleed Crisis Communication Tweet")

But what really made LastPass stand out was the [LastPass Heartbleed checker](https://lastpass.com/heartbleed/), **a dedicated page that allows anyone—not just LastPass users—to enter a domain and see whether it was vulnerable to Heartbleed.** It's this type of universal [Youtility](https://www.pr2020.com/blog/taxi-mike-and-the-power-of-youtility) that cements customer loyalty and plants a seed in the minds of future prospects. Look for opportunities to turn a problem into an asset by providing unique value to those affected.

![LastPass Heartbleed Checker](https://www.readynorth.com/hs-fs/hub/883/file-1301626798.png?width=475&height=198&name=file-1301626798.png "LastPass Heartbleed Checker")

## Lesson 3: Structure Messaging Strategically

When communicating with stakeholders, take a page out of the journalism handbook and [think inverted pyramid](http://webwisewording.com/inverted-pyramid/). It's tempting to lead with apologies or assurance, but what people want is answers, and they want them now. Don't keep them guessing. 

- **First:** Lead with the problem. Explain it as clearly and concisely as possible.
- **Next: **How it impacts the audience *specifically*. What are the actual and potential ramifications?
- **Then: **Next steps. What are you doing about it? What do they need to do about it? Where can they go to learn more? Again, be clear and actionable, offering additional resources if available.
- **Finally: **Reassure them of your commitment to a resolution, and to them. Let them know who they can contact with questions or concerns. Humanizing your brand is important, but in order for it to be perceived as authentic, your words must be backed by action.  

HubSpot and Evernote ([@evernote](https://twitter.com/evernote)) both took this route, making the bottom line the title of their posts.  

![HubSpot Heartbleed Blog Post Title](https://www.readynorth.com/hs-fs/hub/883/file-1303137946.png?width=475&height=113&name=file-1303137946.png "HubSpot Heartbleed Blog Post Title")

When the takeaways are more complex, learn from Mashable's ([@mashable](https://twitter.com/mashable)) [easy-to-digest chart](http://mashable.com/2014/04/09/heartbleed-bug-websites-affected/) summarizing the impact on top websites. The more proactive you can be in answering readers' top questions, the more confident they'll be in your ability to handle the situation.  

![Mashable Heartbleed Chart](https://www.readynorth.com/hs-fs/hub/883/file-1303137981.png?width=550&height=235&name=file-1303137981.png "Mashable Heartbleed Chart")

 

## Lesson 4: Update As Needed, and Be On-Call for Questions

As important as it is to address concerns early, it's equally important to follow up. Update consumers as information is announced or a resolution is found, and make team members available to respond to questions, concerns and even complaints. LastPass timestamped updates to its initial blog post, **demonstrating ongoing effort to resolve any issues.** Buffer's post ([@buffer](https://twitter.com/buffer)) [included a list of helpful resources](http://open.bufferapp.com/buffer-reacted-heartbleed-bug-protect-customers/) for users wanting to learn more, and encouraged users to tweet the company with any follow-up questions.    

![Buffer Heartbleed Resources](https://www.readynorth.com/hs-fs/hub/883/file-1301626823.png?width=575&height=189&name=file-1301626823.png "Buffer Heartbleed Resources")

Crisis communication strategy will and should be adapted based on the scenario, the severity and the audience it affects. But for marketers operating in an always-on world, one thing is certain: Every second counts.    

*Who do you think did a good job of communicating the Heartbleed Bug? What do you think defines outstanding crisis communication? Let me know in the comments. *

![avatar](https://www.readynorth.com/hs-fs/file-1377880184-jpg/Site_Pages/Library/Blog/PR-Blog-Taylor.jpg?width=290&name=PR-Blog-Taylor.jpg)

[Taylor Radey](https://www.readynorth.com/blog/author/taylor-radey)Taylor Radey is the director of marketing and a senior consultant at PR 20/20. She joined the agency in April 2013 with a background in digital and content marketing. She is a 2009 graduate of the E.W. Scripps School of Journalism at Ohio University, where she received a Bachelor of Science in Journalism, with a focus in public relations. [Full bio.](https://www.readynorth.com/story/the-team/taylor-radey)

[mailto:taylor@pr2020.com](mailto:taylor@pr2020.com)<https://www.pr2020.com><https://www.linkedin.com/in/taylorradey><https://twitter.com/taylorlauren>

COMMENTS

## RELATED ARTICLES

[![power theme logo](//883.fs1.hubspotusercontent-na1.net/hubfs/883/raw_assets/public/@marketplace/maka_Agency/POWER%20THEME/images/logos/power/pwr-img_logo_power-white.svg)](https://www.readynorth.com/)

An inexpensive, quick and easy way to build beautiful responsive website pages without coding knowledge

<https://twitter.com/maka_agency><https://www.linkedin.com/company/maka-agency><https://www.instagram.com/maka_agency/>

All rights reserved

```json
{
  "@context" : "https://schema.org",
  "@type" : "Organization",
  "address" : {
    "@type" : "PostalAddress",
    "addressCountry" : "United States",
    "addressLocality" : "Cleveland",
    "addressRegion" : "Ohio",
    "postalCode" : "44115",
    "streetAddress" : "812 Huron Road"
  },
  "email" : "info@readynorth.com",
  "knowsLanguage" : "en-us",
  "logo" : {
    "@type" : "ImageObject",
    "url" : "https://www.readynorth.com/hubfs/BF.com/Brightfind_Primary_Logo.png"
  },
  "name" : "Ready North",
  "url" : "https://www.readynorth.com/blog/4-crisis-communication-lessons-from-heartbleed"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "abstract" : "Crisis communication lessons in a hyper-connected world where panic spreads like brush fire. Whatever the crisis, here's how to handle it.",
  "author" : {
    "@type" : "Person",
    "name" : "Taylor Radey"
  },
  "dateModified" : "July 25, 2014 1 PM",
  "datePublished" : "April 16, 2014 2 PM",
  "headline" : "4 Crisis Communication Lessons from Heartbleed",
  "image" : "http://cdn2.hubspot.net/hub/883/file-1301626798-png/Screen_Shot_2014-04-15_at_12.54.47_PM-process-s475x198.png",
  "inLanguage" : "en-us",
  "keywords" : "[]",
  "mainEntityOfPage" : {
    "@type" : "WebPage"
  },
  "name" : "4 Crisis Communication Lessons from Heartbleed",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://www.readynorth.com/hubfs/Ready%20North%20(RN)%20Logo_BlueOrange_Trademark.png"
    },
    "name" : "Ready North"
  },
  "text" : "If you have online accounts, you’ve likely received an onslaught of communications about Heartbleed, a serious vulnerability in the popular OpenSSL cryptographic software library. The bug, which allows for the stealing of information normally protected by SSL/TLS encryption, was brought to light when almost simultaneously discovered by security firm Codenomicon (@CodenomiconLTD) and Google researcher Neel Mehta (@neelmehta). (For more on Heartbleed, see the Codenomicon-created educational site and this CNET FAQ.) But Heartbleed also offers important crisis communication lessons to marketers that are extremely applicable in a hyper-connected world where panic spreads like brush fire. Whatever the crisis, here's how to handle it. Lesson 1: Time is of the Essence Whether a security breach, product recall or other major concern, your reaction time is critical. Do not wait until the perfectly crafted response is complete or every piece of information has been gathered—act. HubSpot's (@hubspot) 300-word post wasn't elaborate (and Evernote's was a mere 109—see above), but they got the job done. Both addressed the problem head-on, and gave customers clear and transparent insight into what the companies had learned, what they were doing to resolve the problem, and what steps (if any) recipients needed to take. Lesson 2: Cover All Your Bases Consumers have an ever-widening array of channels to learn about and engage with your company. And when trouble occurs, they'll turn to all of them. Leave no stone unturned: Communicate on every outlet available to you. Cloud-based password manager LastPass (@LastPass) came out of this ordeal looking better than ever. The company sent an email to all its customers reassuring the security of LastPass and linking to a blog post with more information. The blog post gave more detailed information on the breach itself, and what it means for LastPass users. LastPass used its Twitter account to drive users to the blog post, and to communicate updates. But what really made LastPass stand out was the LastPass Heartbleed checker, a dedicated page that allows anyone—not just LastPass users—to enter a domain and see whether it was vulnerable to Heartbleed. It's this type of universal Youtility that cements customer loyalty and plants a seed in the minds of future prospects. Look for opportunities to turn a problem into an asset by providing unique value to those affected. Lesson 3: Structure Messaging Strategically When communicating with stakeholders, take a page out of the journalism handbook and think inverted pyramid. It's tempting to lead with apologies or assurance, but what people want is answers, and they want them now. Don't keep them guessing. First: Lead with the problem. Explain it as clearly and concisely as possible. Next: How it impacts the audience specifically. What are the actual and potential ramifications? Then: Next steps. What are you doing about it? What do they need to do about it? Where can they go to learn more? Again, be clear and actionable, offering additional resources if available. Finally: Reassure them of your commitment to a resolution, and to them. Let them know who they can contact with questions or concerns. Humanizing your brand is important, but in order for it to be perceived as authentic, your words must be backed by action. HubSpot and Evernote (@evernote) both took this route, making the bottom line the title of their posts. When the takeaways are more complex, learn from Mashable's (@mashable) easy-to-digest chart summarizing the impact on top websites. The more proactive you can be in answering readers' top questions, the more confident they'll be in your ability to handle the situation. Lesson 4: Update As Needed, and Be On-Call for Questions As important as it is to address concerns early, it's equally important to follow up. Update consumers as information is announced or a resolution is found, and make team members available to respond to questions, concerns and even complaints. LastPass timestamped updates to its initial blog post, demonstrating ongoing effort to resolve any issues. Buffer's post (@buffer) included a list of helpful resources for users wanting to learn more, and encouraged users to tweet the company with any follow-up questions. Crisis communication strategy will and should be adapted based on the scenario, the severity and the audience it affects. But for marketers operating in an always-on world, one thing is certain: Every second counts. Who do you think did a good job of communicating the Heartbleed Bug? What do you think defines outstanding crisis communication? Let me know in the comments.",
  "url" : "https://www.readynorth.com/blog/4-crisis-communication-lessons-from-heartbleed",
  "wordCount" : "1423"
}
```