Uber's Response to Hack

What sounds like a major security breach is getting minimal response from Uber so far. A hacker, possibly 18 years old, apparently posed as a colleague to get IT access through an employee. An embarrassment to the company, the breach could include “full access to the cloud-based systems where Uber stores sensitive customer and financial data.” But Uber communications are trying to minimize the impact.

Three days after the breach, the only message I can find is a “Security Update,” copied below, on Uber’s Newsroom page. Company leaders are likely scrambling to lock down and protect information, but more communication is important. Criticism is harsh because of how easily the hacker appears to have duped an employee through social engineering and because of the unfortunate timing: Uber’s former chief security officer is currently on trial for paying hackers $100,000 to avoid disclosing a breach back in 2016.

The communication and situation are challenging, but people are watching and waiting, as we see in these tweets. This situation raises issues of several character dimensions, for example, accountability, humility, integrity, and courage. With more transparency, the company might be less vulnerable now, not more, as the leaders might fear.

---

September 16, 10:30am PT

While our investigation and response efforts are ongoing, here is a further update on yesterday’s incident:

• We have no evidence that the incident involved access to sensitive user data (like trip history).

• All of our services including Uber, Uber Eats, Uber Freight, and the Uber Driver app are operational.

• As we shared yesterday, we have notified law enforcement.

• Internal software tools that we took down as a precaution yesterday are coming back online this morning.

September 15, 6:25pm PT

We are currently responding to a cybersecurity incident. We are in touch with law enforcement and will post additional updates here as they become available.

Bed Bath & Beyond Statement About CFO Suicide

A leader’s death by suicide is particularly difficult to communicate. Bed Bath & Beyond, with an interim CEO and already suffering from declining sales, profits, and stock price (despite a temporary run-up by Reddit), faced news of the CFO’s dramatic death. Sadly, Gustavo Arnal jumped from his apartment building in Manhattan two days after an investor presentation about the company’s strategy to further cut jobs and close stores. Hired two years ago, Arnal was recently accused, with another executive, of artificially inflating the stock price before selling about $1.4 million worth of shares, which was pre-planned.

What is appropriate to say in such a situation? News articles took one sentence from the company’s statement: “The entire Bed Bath & Beyond Inc. organization is profoundly saddened by this shocking loss.” The entire statement is below and does what it needs to do: express condolences and respect to his family and recognize his career and his value to the company.

As a bad-news message, the main point is right up front. Appropriately, the writers demonstrate compassion and integrity: the statement does not mention the cause of death or the pending litigation.

UPDATE: A Wall Street Journal article describes the incredible stress that Arnal was under, working 18-hour days. Before the long weekend, he had requested a break, which was in discussion.

Bed Bath & Beyond Inc. Mourns the Loss of Executive Vice President and Chief Financial Officer, Gustavo Arnal

UNION, N.J., Sept. 4, 2022 /PRNewswire/ -- Bed Bath & Beyond Inc. (NASDAQ: BBBY) today announced that Gustavo Arnal, Executive Vice President and Chief Financial Officer of the Company, passed away on September 2, 2022. The entire Bed Bath & Beyond Inc. organization is profoundly saddened by this shocking loss.

"I wish to extend our sincerest condolences to Gustavo's family. Gustavo will be remembered by all he worked with for his leadership, talent and stewardship of our Company. I am proud to have been his colleague, and he will be truly missed by all of us at Bed Bath & Beyond and everyone who had the pleasure of knowing him," said Harriet Edelman, Independent Chair of the Bed Bath & Beyond Inc. Board of Directors. "Our focus is on supporting his family and his team and our thoughts are with them during this sad and difficult time. Please join us in respecting the family's privacy."

Mr. Arnal joined Bed Bath & Beyond Inc. in May 2020 following a distinguished global career in finance at Avon, Walgreens Boots Alliance, and Procter & Gamble. At Bed Bath & Beyond Inc., Mr. Arnal was instrumental in guiding the organization throughout the coronavirus pandemic, transforming the Company's financial foundation and building a strong and talented team. He was also an esteemed colleague in the financial community.

Image source.

Calm App Layoff Email

Even meditation apps get bad news. Although the Calm app grew quickly during the COVID lockdowns, the company is now laying off 90 of its 400 employees—more than 20%.

I can’t find the full email online, but the Wall Street Journal posted these quotes:

Regrettably, today we are reducing our overall workforce by 20%. While some of you will be impacted, all of you will be affected. I can assure you that this was not an easy decision, but it is especially difficult for a company like ours whose mission is focused on workplace mental health and wellness.

“We did not come to this decision lightly, but are confident that these changes will help us prioritize the future, focus on growth and become a more efficient organization.”

The article also describe what’s missing:

Mr. Ko’s memo didn’t elaborate on the reasons for the layoffs but promised employees “a more in-depth discussion on the future of the business” at an all-hands meeting scheduled for Friday. A Calm spokeswoman declined to make Mr. Ko available for an interview.

Typically, layoff memos explain reasons, which we know helps employees understand and accept bad news, as I describe in Chapter 8 of Business Communication and Character. More transparency and accountability might be useful.

Maybe Ko doesn’t want the reasons publicized, knowing that the email would be circulated. I also wonder whether the reasons are dire, and despite having a $2billion valuation, the company doesn’t yet have a solid plan for regrowth.

CEOs’ Direct Talk

A Wall Street Journal article this week, “CEOs Ditch the Warm Talk as Economy Shows Signs That ‘Winter’s Coming,’” provides several examples of leaders’ direct communication. When we analyze bad-news messages in business communication, we consider the organizational strategy and, more important. tone and content choices. The current wave is for CEOs to warn employees about layoffs and prepare them for tough times ahead.

Some CEOs use this direct strategy to manipulate employees to return to offices, but others are demonstrating integrity. A CEO who asks employees to “do more with less” is being transparent. Employees may be motivated by this type of talk—either to work harder and cut costs or to leave the company. If employees leave, the CEO might be OK with that, hoping to reduce headcount or hire new workers who are more productive and have different skills.

Although the article title refers to declining “warm talk,” I would argue that the talk is compassionate—honestly preparing employees so they can make decisions about how and whether they want to continue working for the company.

Images source.

Robinhood Layoff Message

Robinhood attracted retail investors during the pandemic but is facing losses as users leave the platform. In Business Communication and Character, I criticized Robinhood’s aggressive marketing tactics to lure inexperienced investors. Now, the company is doing its second round of layoffs: 9% of staff in April and another 23% in August. Lucky for us, the message to staff is posted on the Robinhood blog—a smart move because notes like are typically leaked, anyway.

Overall, CEO Vlad Tenev’s message meets criteria for bad-news communications. The main point is upfront, as I suggest for layoff messages because employees should know the news already. According to this message, they do: Tenev refers to All-Hands meetings before and after the written message. We get the sense that internal communication has been ongoing and that decisions have been transparent.

The message tells employees what’s next and that they will hear the news quickly: “Everyone will receive an email and a Slack message with your status—with resources and support if you are leaving. We’re sending everyone a message immediately after this meeting so you don’t have to wait for clarity.” The better approach would be individual, in-person (or Zoom) meetings, but this isn’t always practical.

Tenev described part of the reasons for the reductions but omitted a recent $30 million fine and increased regulatory pressure. Yet he demonstrated accountability and humility by admitting bad decisions. He wrote, “As CEO, I approved and took responsibility for our ambitious staffing trajectory—this is on me.” In addition, on a press call, Tenev admitted, “The reality is that we over-hired, in particular in some of our support functions.”

Tenev also demonstrated compassion. He sounds human, saying goodbye to people who will leave and encouraging people who will stay, without being too positive, which could be off-putting.

In sum, this isn’t the best layoff message example we have, but it’s certainly not the worst. I would share this with students as a positive example.

Recall Notice

Every so often, I post a recall notice—an example of a bad-news message. These warnings often follow a template, and we see how the company handles the communication in both a government announcement and for its customers.

The U.S. Food and Drug Administration (FDA) posted an official announcement from Natierra about high levels of lead in its organic freeze-dried blueberries. As expected, the statement includes which packages are affected, what effects the lead could have, how to get a refund, and what the company is doing to correct the situation. The ending reassures company stakeholders:

First and foremost, we remain focused on the health and welfare of our employees, customers, and partners. We are committed to taking the appropriate steps to ensure our network and services continue to operate seamlessly for our customers.

Contrasting this message with one posted on Natierra’s website, we see some similar language, but the website message is a bit more conversational and customer focused. The ending varies only with an introductory phrase, including “you”:

To continue to be the brand you trust and enjoy, we remain focused on the health and welfare of our employees, customers, and partners. We are committed to taking the appropriate steps to ensure our network and services continue to operate seamlessly for our customers.

Customers can expand headings under “FAQ—VOLUNTARY RECALL QUESTIONS” that provide the same information as in the FDA statement but in a friendlier format.

In both statements, we see the company taking responsibility and acting with integrity: being accountable for the problem and demonstrating transparency in the communication.

Starbucks Message About Store Safety

Responding to employee concerns about crime, drug use, and other challenging incidents in several stores, Starbucks announced 16 store closings. The company promised to redeploy partners in those locations and reassured all workers that safety is a priority.

As usual, Starbucks posted a message on its public blog. The title, “Message to Starbucks partners: Safety in our stores,” starts with empathy, acknowledging that employees’ concerns have been heard. Two senior VPs of operations wrote, “We read every incident report you file—it’s a lot.”

The message provides eight ways the company will ramp up safety protections for store employees. Training, policies, alarm systems, counselors, health benefits, etc. demonstrate accountability and compassion.

Of course, this communication comes on the heels of increased union activity in Starbucks stores. Still, the company does seem to be "doing the right thing” for its employees, and the message is clear, well organized, and audience focused. One example of audience focus is mentioning the possibility of closing stores but not announcing the specific closures, which affect some employees but not all, as this message is intended.

Twitter Is Silent About Outage

Timing for a Twitter outage is unfortunate today, as the company is suing Elon Musk, trying to prevent him from backing out of his $44 billion purchase bid. During the 40 minutes when users worldwide reported access issues, Twitter’s own status page claimed “all systems operational,” according to Verge.

More than an hour after the app was back online, the company was still quiet quiet on the issue. “Twitter did not immediately respond to a request for comment,” according to Reuters, and I see nothing on the blog or the communications or main company Twitter accounts. Even Elon Musk’s account is silent.

Seems as though the company leaders should say something—or maybe I’m missing it?

Image source.

Meta Bad-News Email to Staff

Facebook Chief Product Officer Chris Cox is direct in telling employees that “serious times” are ahead. The press reports contents of a “memo,” which appears to be a formal email or perhaps post on an intranet.

Organized by six “investment priorities,” the memo starts neutrally: “Every six months, we take stock of our product portfolio and investment plans across the company to assess how we are doing and chart the way forward.” But the tone and recommendations clearly represent tough decisions ahead that affect staff.

With no specific plans for layoffs, warnings come at the end of the memo:

I have to underscore that we are in serious times here and the headwinds are fierce. We need to execute flawlessly in an environment of slower growth, where teams should not expect vast influxes of new engineers and budgets. We must prioritize more ruthlessly, be thoughtful about measuring and understanding what drives impact, invest in developer efficiency and velocity inside the company, and operate leaner, meaner, better exciting teams.

Business communication students will notice lots of jargon, for example, “These are the areas where we see the biggest opportunities for angle-changes in the value we can deliver for people, or businesses, or for our own business, by investing disproportionately relative to our current baseline.” Out with the old; in with the new?

The memo echos a recent meeting CEO Mark Zuckerberg held with staff. Demonstrating vulnerability, he said that Meta is facing the “worst downturns that we’ve seen in recent history” and that hiring will slow. He also gave staff permission to leave:

I think some of you might decide that this place isn’t for you, and that self-selection is OK with me, [and]“Realistically, there are probably a bunch of people at the company who shouldn’t be here.

These warnings are helpful to manage employees’ expectations and to get them on board for the type of belt-tightening company leaders want. Meta might lose people, but this is an attrition strategy that could work in the company’s favor—opening up positions for new people with skills Meta needs going forward.

Airbnb Announces Party Ban

Airbnb’s message banning parties could be considered good news or bad, depending on your perspective. The company’s decision follows a temporary ban during the pandemic, when public gathering spots shut down and parties in rental homes increased. At the time, the rationale was to prevent COVID-19 spread and to reduce the negative impact on neighborhood, a common complaint about Airbnb even before the pandemic.

The decision is easier now—a continuation of the ban rather than a new announcement. As the company wrote in the statement, “It’s been working.” The rationale is clear, and the message is well organized with “Key Takeaways” at the beginning and message titles as headings. Points address concerns of three likely audiences: hosts, neighbors, and guests.

Whether you consider the news good or bad, the statement is an example of a persuasive message. The goal is to stop parties and to win favor of neighbors and municipalities frustrated with noise and other negative effects of short-term rentals, for example, diminished housing inventory and higher home prices. In this regard, the company is demonstrating accountability, although, of course, some would like Airbnb to do more.

BBB's Balanced Executive Change Announcement

On the day that Bed Bath & Beyond posted dismal first-quarter results, the company announced two leadership departures. Like most of these types of news releases, the statement includes quotes from the board chair complimenting the outgoing leaders.

But in this case, the statement starts with a clear acknowledgment of issues and plans to change:

“Bed Bath & Beyond Inc. (NASDAQ: BBBY) today announced significant changes to the Company's senior leadership to focus on reversing recent results, addressing supply chain and inventory, and strengthening its balance sheet. Sue Gove, an Independent Director on the Company's Board of Directors and Chair of the Board's Strategy Committee, has been named Interim Chief Executive Officer, replacing Mark Tritton, who has left his role as President and Chief Executive Officer and as a member of the Board.”

Interim CEO Sue Gove also reinforced the company’s turnaround strategy: "We must deliver improved results. Our shareholders, Associates, customers, and partners all expect more.”

The quote highlighting Tritton’s accomplishments, and those of the merchandising VP, who is also leaving, comes later, under the heading, “Executive Changes.”

Comparing Bed Bath’s statement to similar messages, organization and accountability are probably the most obvious differences. The message sequencing illustrates the company’s primary purpose of reassuring shareholders—prioritizing financial performance over outgoing leader relationships. Although this strategy is sound, the stock fell 20.6% so far today to 5.18, a dramatic fall from its 2013 high of more than 80.

Comms About Disney Leadership Changes

When companies announce leadership changes, they typically include quotes from outgoing executives, but a Disney press release mentions the head of TV only in passing. The focus of the release is on Dana Walden’s promotion to Chairman of Disney General Entertainment Content. The 817-word statement mentions Tim Rice near the end of the first paragraph:

She will have oversight of ABC Entertainment, ABC News, Disney Branded Television, Disney Television Studios, Freeform, FX, Hulu Originals, National Geographic Content, and Onyx Collective. Walden previously served as Chairman, Entertainment, Walt Disney Television and succeeds Peter Rice, who is leaving the Company. Her appointment is effective immediately, and she will report directly to Chapek.

News reports explains that Rice was fired for differences over creative decisions, compensation, etc. The company statement could have acknowledged a bit more and demonstrated integrity and accountability for the decision; otherwise, the press carries the message.

In Walden’s email to employees, she mentions Rice in the 14th of 16 paragraphs:

In reflecting on my own professional journey, I am very fortunate to have worked alongside Peter Rice for a long time. We have been friends for almost three decades and he was my boss for eight years. He is a gifted executive, and I learned a lot from him. I know you all join me in wishing him the best in whatever he chooses to do next.

Of course, this is the right thing to do—and important for employees who may have loyalties to Rice. I respect that she didn’t sugarcoat his departure (and at least Disney isn’t claiming the weasley “mutual agreement” reason for leaving).

As always, leaders communicate by what they say and what they omit. This situation also illustrates a question for business communication students: is this bad news, good news, or a persuasive message? I would argue that it’s all three, depending on your perspective.

PGA Commissioner Sends Letter to Suspend Golfers

After a new golf tour has wooed Professional Golfers’ Association players, the association announced that they are no longer eligible to play in the PGA. The commissioner’s letter is an example of bad news for those who accepted the opportunity from the LIV Golf Invitational Series, a Saudi-backed organization, and it’s an example of persuasive communication for those who might consider doing the same.

In his letter, Commissioner Jay Monahan justifies the decision, using the word “regulations” several times. He mentions that players didn’t get proper releases for the conflict and blames players for making a “choice for their own financial-based reasons.” Monahan also appeals to a wide audience when he writes, “But they can’t demand the same PGA Tour membership benefits, considerations, opportunities and platform as you. That expectation disrespects you, our fans and our partners.”

Monahan uses strong language throughout and calls out specific players at the end of the letter, which players received while they were in the middle of a tournament. He demonstrates courage by facing some backlash, and he demonstrates some vulnerability by acknowledging, “What’s next? Can these players come back?”

The PGA is also holding players accountable, although not everyone agrees. In a statement, LIV Golf calls the decision “vindictive” and promises further action. The brief tweet is a notable counterweight to the PGA’s two-page letter. Students may analyze both in terms of tone, audience focus, content choices, and organization.

A Different Approach to Customer Replies

Squarespace is trying to reduce the volume of customer requests to handle, and I like the approach. I received this email three days after I submitted a ticket on the website.

From: Squarespace Customer Care <customercare@squarespace.com>
Sent: Tuesday, June 7, 2022 9:06 AM
To: Amy Newman <amynewman@cornell.edu>
Subject: [Support] Re: Automatic weekly?

##- Please type your reply above this line -##

Hello, this is Squarespace Customer Support. We're writing to confirm that we received your email a few days ago and are still working to respond as soon as possible.

We're currently experiencing a high volume of requests, so it's taking us longer than usual to respond. We apologize for any inconvenience this causes.

If you've resolved your issue since contacting us, please reply with the word "solved" to let us know and we'll close the case on your behalf. You can reopen a closed case at any time by replying to the thread.

If you want to speak to someone directly about your issue, contact us via live chat. Live chat is available Monday - Friday from 4:00 AM to 8:00 PM ET. To start a chat, visit this link, choose a topic, then select Live Chat:

https://support.squarespace.com/hc/en-us/requests/new#choose-topic

I wonder what percentage of customers resolve their own issue before the company can respond. Either way, this message gives customers some control over their fate and may reduce frustration. It worked for me, partly because the declining customer experience is well known and not unique to Squarespace.

It might not work for customers with a serious issue, but they can follow options in the last paragraph. In this sense, the message is a bad-news reply and, like most, it’s also persuasive. Students can analyze how well the writing style and organization work for the audience and purpose.

Another Elon Musk Email: Layoffs

Elon Musk has a unique way of announcing bad news. In an email to employees, which he sent to the New York Times and other news organizations, Musk is brief and direct.

To: Everybody
Subject: Headcount Reduction
Date: Friday, June 3, 2022

Tesla will be reducing salaried headcount by 10% as we have become overstaffed in many areas. Note this does not apply to anyone actually building cars, battery packs or installing solar. Hourly headcount will increase.

Elon

Business communication students can compare this message to principles in Chapter 8 for delivering bad news, particularly about jobs. Musk’s email doesn’t quite measure up. A better example is from Brian Chesky, Airbnb. Chesky tailors the message to his audience, letting them know why the decision was made, how it affects them, and what they can expect. He demonstrates vulnerability and compassion to those leaving—and to those staying.

PPT About Lost Luggage

An @AerLingus passenger had been tracking his luggage with Apple’s Airtags but had no luck getting it back from the airline to his home in Dublin. He decided to tweet a PowerPoint presentation to show exactly what happened and where one of his three bags was left—at an address in London. He described the experience, including poor communication from the airline.

The news went viral and was picked up by CNN, but still, the airline didn’t respond. So far, he reports, “I still haven’t had a response or apology from the airline. Am I surprised? No. Am I disappointed? Yes.”

This story reminds me of a PPT way back in 2007, “Yours is a very bad hotel,” when PPT was in its infancy.

@aviosAdventurer did a nice job with the map graphics and location icons. I wish he had included some of the messages to and from the airline. Selfishly, I would like to analyze them against business communication principles, but I also believe they might have strengthened his case against the airline.

Boeing's Scant Statement on Crash

As we wait for details about the plane crash in China, Boeing has issued a statement. The plan was a Boeing 737—not the Max that caused two crashes in 2019 and 2020. Still, the company has suffered greatly, taking longer than expected fixing problems and doing PR damage control in the meantime. This latest situation doesn’t help the company’s reputation.

At the same time, this crash is highly unusual, taking place during descent, during which only 3% of plane crashes occur. In addition, this plane had been operating for six years without issue. Both black boxes were found, so investigators will find more information. But, sadly, knowing the reason for the crash won’t change the fate of 132 victims and their loved ones.

Boeing’s statement is the bare minimum. The company follows its typical communication protocol, saying as little as possible and coming from no one in particular. I understand not taking responsibility at this point, but how about a little more compassion and authenticity? I wonder what lessons company leaders learned in the past two years about communication and character.

Boeing Statement on China Eastern Airlines Flight MU 5735

CHICAGO, March 26, 2022 – Boeing today released the following statement:

“We extend our deepest condolences for the loss of those on board China Eastern Airlines Flight MU 5735. Our thoughts and prayers are with the passengers and crew, their families and all those affected by this accident. Boeing will continue to support our airline customer during this difficult time. In addition, a Boeing technical team is supporting the NTSB and the Civil Aviation Administration of China who will lead the investigation.”

Contact
Boeing Communications
media@boeing.com

Shaming Doesn't Work

A recent study explores companies’ responses when an employee falls for hacking. Turns out, shaming doesn’t work.

When an employee causes a cybersecurity breach, company leaders may want to single out that employee by “blaming and shaming.” The intent is to prevent future breaches, but the results can be devastating, as the author explains:

“Shame is similar to a boomerang that will come back to hurt the organization, as well as harming the employee. Managers should deal with the mistake, but not reject the employee. If employees feel that their personhood is being attacked, they will respond defensively. Shaming results in a lose-lose outcome.”

I can’t think of a situation when blaming and shaming works. In the case of a hack, the employee already feels bad and won’t likely make the same mistake. Instead of causing disloyalty, leaders might try demonstrating compassion.

Image source.

Doodle Explains Outage

Doodle, the meeting scheduler, gives us a good example of a bad-news message. In this short email, CEO Renato Profico apologizes and explains a recent outage. Having Profico craft the message with an apology that doesn’t deflect blame demonstrates accountability.

I would suggest two changes to the message. I would have liked for Profico to acknowledge the impact on users—how it may have affected them. Also, I note a couple of grammatical errors and hope that business communication students can spot them.

Advice for Resignation Emails

A Wall Street Journal article suggests ways to resign from your job gracefully. With a wave of post-pandemic departures, we’re seeing all sorts of resignation messages, some more appropriate than others. The string of emails can be disheartening for people who decide to stay, and leavers should be mindful of burning bridges they may want to walk across in the future.

A law career coach advises that people “Let it rip. Let everything out”—in a document that you don’t send. Then, send an email that respects the workplace and the people you’ll leave behind:

“For the real deal, be gracious and express gratitude. Include up to three career highlights. (Any more and you risk being seen as a braggart.) And skip the passive-aggressive jabs.”

I hadn’t thought about including career highlights, and I wonder whether coworkers would appreciate reading them. Instead, I suggest observing what other resignation emails include and following suit. Every workplace has its own norms around these types of messages.

I do agree with this advice:

“By giving your notice, ‘the power dynamic has been leveled.’ Use that new sense of control and confidence to share more authentically about yourself, not torpedo your relationships on the way out the door.”

The coach is right: you made your decision and are burdening your manager and coworkers who will pick up the slack. Now’s the time to demonstrate humility instead of rubbing it in and causing more hurt feelings.