The six most common types of business crises are reputation and social media crises, cyberattacks and data breaches, natural disasters, labor disputes, supply chain and operational failures, and financial shocks. They spread at different speeds, from hours for a viral post to months for a cash shortfall, and each type has a documented case, including CrossFit in 2020, Equifax in 2017 and Delta Air Lines in 2005.
Last updated: October 26, 2026
Which business crisis types spread fastest?
Reputation and cyber crises spread fastest, often becoming public within hours, while financial crises usually build over weeks or months before they become visible. The table orders the six types from fastest to slowest onset and names one documented case for each.
| Crisis type | Typical speed to public visibility | Documented case |
|---|---|---|
| 1. Reputation and social media | Hours | CrossFit, June 2020 |
| 2. Cybersecurity and data breach | Hours to days once discovered | Equifax, 2017 |
| 3. Natural disaster | Immediate | Walmart after Hurricane Katrina, 2005 |
| 4. Labor and workforce | Days to weeks | SAG-AFTRA strike, 2023 |
| 5. Supply chain and operations | Days to weeks | Ever Given in the Suez Canal, 2021; KFC UK, 2018; Southwest Airlines, 2022 |
| 6. Financial | Weeks to months | Delta Air Lines, 2005 |
1. What is a reputation or social media crisis?
A reputation or social media crisis is a public backlash that spreads faster than a company can respond, usually set off by a post, a video or an executive's words.
On June 6, 2020, CrossFit founder and CEO Greg Glassman replied "It's FLOYD-19" to a post about racism and public health from the Institute for Health Metrics and Evaluation. Reebok announced it was ending its partnership with CrossFit within two days, CBS News reported on June 8, 2020, and Glassman stepped down on June 9, according to Fortune's June 9, 2020 report.
United Airlines shows the second pattern, where the first statement makes the crisis worse. After four passengers were removed from United Express Flight 3411 in Chicago on April 9, 2017, CEO Oscar Munoz apologized the next day for having to "re-accommodate" customers, a phrase NPR reported drew fresh outrage. A second apology followed on April 11, in which Munoz said no one should ever be mistreated this way, according to CNBC.
The practical lesson is to name the harm in the first statement and to assign one person to watch mentions around the clock. Reputation recovery examples show how companies rebuilt trust after statements like these.
2. What is a cybersecurity or data breach crisis?
A cybersecurity crisis is a breach of customer or company data that the company must disclose on a timeline set by regulators, investors and public pressure.
Equifax discovered its 2017 breach on July 29 and disclosed it on September 7, 40 days later, according to Wikipedia's account of the breach. The breach exposed data on about 147 million consumers. In July 2019, Equifax agreed to a settlement with the Federal Trade Commission, the Consumer Financial Protection Bureau and 50 states and territories worth at least $575 million, the IAPP reported.
The practical lesson is to write the holding statement before an incident, so a dated, factual statement can go out within hours of confirming a breach. A crisis communications plan sets out who approves that statement and who briefs regulators.
3. What is a natural disaster crisis for a business?
A natural disaster crisis is physical damage and operational shutdown from a hurricane, flood, fire, earthquake or severe storm, and it is visible from the first hour. FEMA estimates that roughly 40% of small businesses never reopen after a disaster, and another 25% close within the following year.
Walmart's response to Hurricane Katrina, which made landfall on August 29, 2005, shows what preparation looks like. Fortune reported that Walmart's truckers hauled $3 million of supplies into the affected area, in many cases days before FEMA arrived, and that the company gave $17 million in cash. The Honolulu Advertiser reported that its Brookhaven, Mississippi, distribution center had 45 trucks loaded before landfall.
The practical lesson is to document an emergency plan, stage supplies before the storm and name an alternate operating location. Insurance and backed-up business data belong in the same plan.
4. What is a labor or workforce crisis?
A labor crisis is a strike, walkout, mass resignation or loss of key employees that stops or slows operations, and it usually escalates through internal channels for days or weeks before it becomes public.
The SAG-AFTRA actors' strike began on July 14, 2023, and ended on November 9, 2023, and it shut down much of Hollywood's film and television production. A small business faces a smaller version of the same risk when two or three key employees leave without a successor in place.
The practical lesson is to plan for sudden departures, workplace accidents and labor disputes, and to record the institutional knowledge that leaves with each employee.
5. What is a supply chain or operations crisis?
A supply chain or operations crisis is a failure in delivery, logistics or internal systems that leaves a company unable to supply what customers expect. Small companies feel it most because they rarely hold large inventory buffers.
On March 23, 2021, the container ship Ever Given ran aground in the Suez Canal and blocked it until March 29. Lloyd's List estimated that more than $9 billion of goods were held up each day, CNBC reported.
KFC's UK crisis came from a logistics change. After a change in delivery provider in February 2018, hundreds of restaurants closed for lack of chicken, and KFC ran a full-page apology on February 23 that showed an empty bucket with its letters rearranged to read "FCK," according to CNBC.
Southwest Airlines had an internal failure. In late December 2022 the airline canceled about 16,900 flights and stranded more than 2 million passengers. In December 2023, the U.S. Department of Transportation imposed a $140 million civil penalty, the largest consumer protection action in its history, NPR reported.
The practical lesson is to diversify suppliers, keep safety stock and tell customers what is closed and what is open on a page that updates. KFC's apology ad pointed readers to a list of open restaurants.
6. What is a financial crisis for a business?
A financial crisis is a cash shortfall, debt burden or market shock that threatens a company's ability to pay its obligations, and it usually builds over weeks or months inside internal reporting before it becomes public.
Delta Air Lines filed for Chapter 11 reorganization on September 14, 2005, and its filing announcement cited record-high fuel costs and pressure on revenues. The same announcement said the airline would keep operating its full flight schedule.
The practical lesson is to keep three to six months of operating expenses in reserve, line up more than one source of funding and prepare the customer message before any filing or covenant breach.
What made the Tylenol recall the standard for crisis communication?
Johnson & Johnson's 1982 Tylenol recall set the standard because the company pulled 31 million bottles nationwide after seven people died, even though the tampering appeared isolated to one region, prioritizing safety over cost. That combination of immediate acknowledgment, regular updates and visible corrective action, in this case tamper-resistant packaging that became an FDA-mandated industry standard, is still the reference model more than four decades later. Common crisis management mistakes shows what happens when organizations do the opposite.
Frequently asked questions
What are the most common types of business crises?
The six most common types are reputation and social media crises, cybersecurity and data breaches, natural disasters, labor and workforce crises, supply chain and operational failures, and financial crises.
Which type of business crisis spreads the fastest?
Reputation and social media crises spread fastest, often within hours, while financial crises typically build over weeks or months before they become visible.
Should every business have the same crisis plan?
No. A plan built for a slow financial crisis will not work for a reputation crisis that spreads in hours, so a crisis program needs a separate response timeline for each fast and slow type.
What is the best example of good crisis communication?
The 1982 Tylenol recall is the most cited example. KFC's 2018 apology ad and Walmart's 2005 Katrina response are more recent cases that crisis communicators often cite.
What should a business do next?
A business should pick the two crisis types it is most exposed to and write a dated holding statement for each before an incident happens. The guide to crisis PR covers the response sequence, and key principles of crisis management covers planning, team structure and recovery. For campaigns that worked, see the best crisis management PR campaigns, and for original data on what crises cost, see The Crisis Tax study. The crisis PR practice builds these plans for clients.
