Every founder we work with believes crisis happens to other people.
Then someone they trusted goes to the press. Or a spouse files for divorce the week before a major funding round. Or a regulatory inquiry lands on their desk with language that makes their lawyer turn pale. Or they get a cancer diagnosis and realize their company has zero succession planning.
We’ve seen all of it. More than once.
What separates founders who survive these moments from those who don’t isn’t luck or resources. It’s whether they understood the playbook before they needed it.
The First 72 Hours Determine Everything
Most crisis advice focuses on long-term strategy. That’s backwards. The first 72 hours after a crisis becomes known - to you, to your board, to the public - set the trajectory for everything that follows.
In those hours, most founders make one of two mistakes:
Mistake One: Panic response. Firing off defensive emails, calling board members to explain before understanding the full picture, posting statements on social media, hiring the first crisis PR firm that answers the phone. Every action taken without complete information becomes ammunition later.
Mistake Two: Freeze response. Believing that if they just stay quiet, things will blow over. They don’t. Silence in a crisis isn’t neutral - it’s interpreted as either guilt or incompetence. Nature abhors a vacuum, and so does the news cycle.
The correct first move is always the same: contain and assess.
Contain means no external communication until you understand the situation. No interviews, no statements, no Twitter threads explaining your side. Your lawyer’s first job is to buy you time, not to file motions.
Assess means getting the complete picture before you act. What actually happened? What evidence exists? Who else knows? What’s the worst-case scenario if this becomes public? Most founders dramatically underestimate what their opponents know.
The Inner Circle Problem
When crisis hits, founders instinctively turn to their existing advisors. Their corporate lawyer. Their long-time accountant. Their executive coach.
This is usually a mistake.
Not because these people are incompetent - they’re often excellent at their regular jobs. But crisis work requires a different skill set. Your corporate lawyer knows contracts and governance; they may have never handled a whistleblower situation or a regulatory inquiry. Your accountant knows your books; they don’t know how to structure a quiet settlement that stays off the record.
More importantly, your regular advisors have existing relationships with other stakeholders that create conflicts you won’t see coming. Your lawyer also represents the company, not just you. Your accountant reports to the board. Your executive coach may be coaching your co-founder too.
The first thing we do in any founder crisis: identify who actually represents the founder’s personal interests, separate from the company’s interests. Often, nobody does.
The Divorce Timing Problem
Nothing derails a company faster than a founder divorce announced at the wrong moment.
We’ve seen it multiple times: founder files for divorce, spouse’s lawyer sends discovery requests, and suddenly the company’s confidential financials, cap table, and strategic plans are sitting in a family court file that anyone can access.
Or worse: founder is in the middle of a funding round, files for divorce, and the spouse’s lawyer contacts the lead investor directly. “We’re going to need full disclosure of that term sheet as part of asset discovery.”
The timing of disclosure - to your board, to your investors, to your co-founders - matters enormously. There’s a narrow window where you control the narrative. Once that window closes, everyone else controls it.
The playbook for divorce during a critical company moment:
-
Pre-disclosure planning. Before filing anything, understand exactly what assets are at stake, what information exposure creates risk, and what the spouse’s likely strategy will be.
-
Board notification timing. Your board should hear about the divorce from you, framed the way you want, before they hear about it from anyone else. But the notification should come after you’ve already secured key documents and understood your exposure.
-
Investor communication. Different from board notification. Investors need to know that leadership stability isn’t at risk and that company assets aren’t about to be dragged through family court.
-
Employment agreement review. Many founder employment agreements have clauses about personal conduct, material changes in circumstances, or disclosure requirements that nobody reads until they matter.
The Regulatory Inquiry Dance
When a regulatory agency - SEC, DOJ, FTC, state AG, pick your alphabet - sends a letter requesting documents, most founders have no idea what they’re walking into.
The standard advice from corporate counsel: “Let’s cooperate fully and respond promptly.” This is sometimes right and sometimes catastrophically wrong.
Regulatory inquiries exist on a spectrum. At one end, you’re a witness - they want your data to build a case against someone else. At the other end, you’re the target - they’re building a case against you. In the middle, you’re a subject - they haven’t decided yet.
The strategy is completely different depending on where you sit on that spectrum, but you often don’t know where you sit. And asking directly (“Am I a target?”) can change the answer.
What matters in the first response:
Scope negotiation. The document request is almost always broader than what they actually need. Narrowing the scope early saves enormous cost and limits exposure.
Privilege protection. Once you produce a document, you’ve probably waived privilege on it. Some productions are clearly required; some are optional; some are actively harmful. Your lawyer should be making these decisions explicitly, not defaulting to full production.
Interview strategy. If they want to interview employees, including you, the sequence and preparation for those interviews determines the outcome. Going in unprepared is never the right choice, even if you have nothing to hide.
The Health Crisis Nobody Plans For
We worked with a founder who got a serious cancer diagnosis three weeks before his company’s Series B was supposed to close.
His first instinct: hide it. Close the round, then deal with the treatment. This is an understandable but terrible strategy. If the diagnosis becomes known later, and the investors weren’t informed, you’ve created a fraud liability on top of a health crisis.
His second instinct: full disclosure immediately. Also problematic. The round would almost certainly fall apart, and then he’d be dealing with cancer while also watching his company die.
The actual solution involved careful structuring: bringing in a strong interim CEO, restructuring the round terms to include key-person provisions, adjusting his role from CEO to Chairman, and then disclosing in a way that positioned the transition as planned evolution rather than crisis response.
It worked because we had three weeks. Had he waited until the diagnosis was public, there would have been no good options.
The health crisis playbook:
-
Insurance review. Most founder life insurance and key-person policies have notification requirements and exclusions that nobody reads until they matter. Read them before the diagnosis.
-
Employment and equity implications. Disability provisions, vesting acceleration, and employment termination clauses interact in complex ways. Understand your documents.
-
Succession planning. Even if you’re likely to recover fully, the board needs to see a plan. Having one ready makes the conversation completely different.
-
Communication sequencing. Who needs to know what, in what order, with what framing? This is where most founders get it wrong.
The Reputational Attack
Social media has made every founder a potential target. One viral tweet, one disgruntled employee with a Medium account, one journalist looking for a story, and suddenly you’re defending yourself against allegations that may or may not be true.
The old playbook - “don’t engage, it’ll blow over” - is often wrong now. Stories don’t blow over when algorithms keep feeding them to people who want to be outraged.
But the new playbook - “respond immediately and aggressively” - is also often wrong. Many responses amplify the original attack, giving it credibility and reach it wouldn’t have had otherwise.
The calculation depends on several factors:
Reach of the initial attack. A tweet with 50 likes requires different treatment than a New York Times story. Most founders dramatically overestimate how many people have actually seen negative coverage.
Truth content. If the allegations are false, you have more options. If they’re true but missing context, that’s different. If they’re true and bad, that’s different again.
Attacker motivation. Someone who wants money will behave differently than someone who wants revenge. Understanding what they actually want shapes the response.
Your vulnerability to continued engagement. Some attackers are looking for a fight. Engaging gives them what they want. Others are making a specific ask and will stop if it’s addressed.
The playbook isn’t a single response - it’s a decision tree that most founders have never thought through.
What This Actually Costs
Crisis management is expensive. Good crisis lawyers bill $1,500 to $2,500 per hour. Crisis PR firms charge monthly retainers of $50,000 to $200,000. Forensic accountants, investigators, and specialized consultants add up fast.
Most founders facing their first crisis are shocked by these numbers. Some try to save money by using cheaper advisors or handling things themselves.
This is almost always false economy. The cost of the crisis - in lost deals, lost employees, lost reputation, lost equity value, personal liability - dwarfs the cost of proper management. We’ve seen founders lose eight-figure outcomes trying to save six figures on crisis response.
But not every crisis needs every resource. Part of what good advisors do is right-size the response - knowing when you need the full team and when a lighter approach will work.
The Real Playbook
If we had to distill everything into core principles:
Prepare before you need it. Have relationships with crisis advisors before you need them. Understand your insurance, your employment agreements, your personal liability exposure. Run scenarios, even if they feel paranoid.
Control information flow. The side that controls the narrative usually wins. Every communication, to anyone, shapes the story. Be intentional.
Separate personal from company. Your interests and the company’s interests often align, but sometimes they don’t. Know the difference, and have advisors who represent you personally.
Time is your scarcest asset. Almost every crisis decision is better with more time. Buy it however you can.
Don’t assume you know the full picture. What you know about the crisis is almost certainly incomplete. What others know is almost certainly more than you think.
The founders who navigate crises successfully aren’t lucky. They’re prepared. And when preparation isn’t possible, they’re humble enough to recognize what they don’t know and get help fast.
That’s the playbook. Nobody talks about it until they need it. By then, it’s often too late.