The Numbers Don’t Lie: How Sony is Hacking its Own Reputation
The numbers are stunning – 77 million Sony PlayStation accounts hacked, 24 million Sony Online Entertainment accounts hacked, 12.3 million credit card holders information in possible jeopardy, including an estimated 5.6 million Americans.
Unfortunately some other metrics regarding the Sony data breach are also amazing – two days to contact law enforcement, five days to contact the FBI, seven days from the date of the breach for Sony’s U.S. subsidiary to issues a statement, nearly two weeks for the Company to offer more fulsome details of the attack and almost three weeks before Sony’s CEO issued a public apology. So much for learning lessons from Toyota’s long, fragmented and much maligned dance of disclosing details of the issues with its cars and seeking forgiveness.
Corporate bureaucracies, geography and culture aside, the rules of crisis communications are universal, particularly in the digital age of immediacy and no boundaries. Companies, whether U.S., Japanese or from Djibouti all need to get factual information out quickly (days are no longer a relevant measure of crisis response time), take responsibility, be transparent and exert control of the story in a crisis situation.
Sony like Toyota was a well respected company with a loyal customer base. PlayStation partisans are a more rabid even cultish crowd than Toyota drivers and they took to social media with a vengeance to air their outrage and savage Sony. Many are saying that they are done with Sony for good. Time will tell. Toyota has invested much time and resources in trying to win back trust of their customers and things are now getting back to normal for them. Sony will no doubt need to do the same.
The dichotomy between Sony and Toyota is the events that precipitated Toyota’s crisis were manufactured in-house while Sony was attacked by hackers (unless you are one of the conspiracy theorists who believe it was a disgruntled employee). If fact, Sony looks to be trying to make use of this victimhood in an effort to gain some sympathy from its customers as well all the elected officials and regulators investigating the situation. We will have to wait and see how this works out for them.
In the end, the Sony data breach shows once again that a company’s crisis response can be as, if not more damaging than the crisis itself. Toyota’s recall fiasco of 2010 cost it $5.1 billion or 16 percent in brand value according the latest Interbrand’s study of Best Global Brands.
The Sony saga is not over but it will be interesting to see how their brand value is impacted. Also worth watching is whether the next global company facing a crisis in the U.S. or elsewhere will heed the lessons of Toyota and now Sony.




Consider Toyota, the brand that became synonymous with the word “recall” in recent years. Toyota seems destined to be the poster child for reputation destruction and the subject of cases studies that will be taught for years to come in college PR courses. First, they denied the problems. Then they apologized – well, sort of. And then they apologized some more. They launched campaigns about safety and trotted out customer testimonials.