Saturday I spent forty minutes trying to freeze my credit at three companies I have never knowingly done business with, on a site that told me twice to come back later. My mother called partway through to ask whether she should be worried. I did not have a good answer.
Equifax disclosed on September seventh that a breach exposed data on roughly a hundred and forty three million Americans. Then came the response site that could not stay standing, the arbitration language sitting inside the remedy, and the executives who sold stock in the window between discovery and disclosure.
Every crisis playbook I have written starts with the same quiet assumption, and Equifax does not qualify for it.
Crisis communications is the practice of spending goodwill you already have, and a company whose product is people who never agreed to be its product has none banked.
Think about who actually buys from Equifax. Lenders, insurers, employers, landlords. Those are the customers. The hundred and forty three million of us are inventory. We did not choose the company, cannot leave it, and have never received anything from it we would miss. There is no lapsed relationship to invoke, no first purchase to remind anyone of, no benefit of the doubt to draw down, because no doubt was ever extended in either direction.
So the standard moves land as insults. We take this seriously reads as filler when nobody signed up for anything. A free year of monitoring reads as an upsell, particularly when the monitoring is a product the company sells. The arbitration clause, whatever the lawyers meant by it, reads exactly like what it is, which is a company protecting itself inside the same document where it claims to be protecting you.
I have watched this from inside brand strategy rooms, and the failure is almost always upstream of the crisis. Brands that survive bad weeks are the ones that banked something in the good ones. Patagonia can absorb a hit because customers have watched it choose the harder thing at cost. Costco can raise a membership price without a revolt. That reserve gets built in ordinary quarters, by companies that treat the people on the other end as people rather than rows.
Brands that survive bad weeks are the ones that banked something in the good ones.
The practical lesson is not about breach response. It is about who your brand thinks it is talking to on a normal Tuesday. If the people affected by your worst day are not the people you spend your budget speaking to, you will discover on that day that you have no standing to ask for patience.
Barnaby sat on my keyboard while I was on hold with the third bureau and Truffles knocked a pen off the table. For a minute I envied them their complete absence of a credit file.