Crisis communication during cyber attacks: A Situational Crisis Communication Theory perspective

Abstract

Significant reputational and operational risks to organisations are mostly caused by cyberattacks, such as ransomware and data breaches, making effective communication key. The study seeks to answer the following research questions: 1) What challenges are encountered during cyber crisis communication, and 2) which crisis communication strategies are most effectively used by organisations during cyberattacks, and how they align with SCCT? The study was qualitative in nature, using existing literature and case studies of prominent cyberattacks that happened globally in 2020, where cyberattacks were at their peak due to the work-from-home setup. The study applied Situational Crisis Communication Theory (SCCT) to guide the research. Findings highlight key challenges in crisis communication, such as balancing transparency with confidentiality, countering misinformation, ensuring timely communication when the organisation is under pressure and reaching marginalised populations. Regarding research question two, the findings identified five key themes: transparency spectrum, timeliness and proactiveness, channel usage, message focus and the COVID-19 context. To enforce effective communication during cyberattacks, organisations must develop pre-approved communication toolkits, use internal decision processes to balance risk and openness, conduct vulnerability-sensitive communication planning and Audits and Regulatory Compliance.

Keywords: {'name': 'Crisis Communication'}, {'name': 'cyber attacks'}, {'name': 'Situational Crisis Communication Theory'}

Authors & affiliations

Faith Tinonetsana
Durban University of Technology

Veena Rawjee
Durban University of Technology

Jeevarathnam Govender
Durban University of Technology

Deposited references

Supplied references, not a list of publications citing this article.

DOI: 10.1109/ACCESS.2020.3010226

DOI: 10.1016/j.jksuci.2022.08.003

DOI: 10.3390/electronics12061333

DOI: 10.1109/ACCESS.2019.2963724

DOI: 10.1007/978-981-96-4438-4_6

DOI: 10.1007/978-3-031-13956-7

DOI: 10.4102/sajim.v23i1.1277

Coombs, T. W. (2018). Crisis communication. In R. L. Heath (Ed.), The encyclopedia of public relations (2nd ed.). SAGE Publications.

DOI: 10.1002/9781119678953.ch14

DOI: 10.4324/9780429330650-16

Dick, L., & Wessel, J. (2023). The duality of transparency in strategic communication: Reputation management during a crisis in the social media industry [Unpublished manuscript].

DOI: 10.20944/preprints202009.0630.v1

George, A. S., Baskar, T., & Srikaanth, P. B. (2024). Cyber threats to critical infrastructure: Assessing vulnerabilities across key sectors. Partners Universal International Innovation Journal, 2(1), 51–75.

DOI: 10.31181/jdaic10018122023g

DOI: 10.4018/979-8-3373-2175-2.ch007

DOI: 10.30574/wjarr.2022.15.3.0920

Kaspersky. (2023). Ransomware WannaCry. https://www.kaspersky.com/resource-center/threats/ransomware-wannacry

Khan, N. A., Brohi, S. N., & Zaman, N. (2023). Ten deadly cyber security threats amid COVID-19 pandemic. Authorea Preprints.

DOI: 10.47604/ijcpr.2270

DOI: 10.1007/978-3-030-88907-4_18

DOI: 10.1016/j.cose.2021.102248

Merah, S., & Omar, O. (2024). Enhancing communication efforts to combat fake news on social media platforms: Strategies and tools for promoting digital literacy and trust in information. Human and Social Studies Journal, 9(2), 592–614.

DOI: 10.31920/2634-3622/2022/v11n3a4

DOI: 10.1007/s12117-020-09397-5

DOI: 10.3390/informatics9010028

DOI: 10.1002/itl2.247

Rosso, K. D. (2020). New threat discovery shows commercial surveillanceware operators latest to exploit COVID-19. SentinelLabs.

Samiksha, S. (2021). Investigating an association between DDoS and phishing attacks (Master’s thesis, University of Twente).

Särökaari, N. (2020). Phishing attacks and mitigation tactics [Unpublished master’s thesis].

DOI: 10.54783/ijsoc.v6i1.1098

DOI: 10.1016/j.ijinfomgt.2024.102780

DOI: 10.1007/978-3-030-69174-5_8

Tan, R. Y. (2025). Crisis communication strategies and their impact on brand reputation. TWIST, 20(2), 363–373.

DOI: 10.1108/JBIM-01-2021-0029

Trigunadi, A. (2025). An analysis of crisis communication strategies used by corporations during social media backlash incidents. The Journal of Academic Science, 2(5), 1265–1277.

Walter, J. (2020, September 4). Threat intel: Cyber attacks leveraging the COVID-19/coronavirus pandemic. SentinelLabs.

DOI: 10.1093/cybsec/tyae001

DOI: 10.1016/j.eij.2021.12.003