How to Create a Social Media Crisis Plan for Law Firms

September 26, 2026

A social media crisis can start with one comment, one hacked account, one poorly worded post, or one employee response that spreads faster than expected.

For law firms, the stakes are higher than simple embarrassment. A social media mistake can involve client confidentiality, advertising rules, cybersecurity, professional conduct, and reputation all at once. The American Bar Association continues to stress that legal social media activity must protect confidentiality, maintain accuracy, and preserve professionalism.

That is why every law firm should have a social media crisis plan before something goes wrong.

For this topic, the plan can be built around four core steps.

1. Know What Counts as a Crisis

Not every negative comment is a crisis.

A real social media crisis is something that could seriously affect the firm, its clients, or its reputation.

Examples include:

• A social media account being hacked
• Confidential client information being exposed
• A post containing inaccurate or misleading legal information
• A staff member making an inappropriate public comment
• A viral complaint or review gaining attention
• A post being misunderstood and creating public backlash
• Someone impersonating the firm online

A crisis plan should define these situations in advance.

That helps your team avoid two common mistakes: overreacting to routine criticism and underreacting to a serious problem.

Fun Fact: A Hacked Account Can Become an Ethics Issue

For lawyers, an account hack is not only a technology problem.

The ABA has warned that a compromised account can raise issues involving confidentiality, advertising, communication, supervision, and technological competence.

That means account security should be part of your social media crisis plan, not treated as a separate issue.

Your firm should know:

• Who controls each account
• Who has login access
• Where recovery information is stored
• Who can immediately change passwords
• Who contacts the platform if the account is compromised

Speed matters when an account is posting something your firm did not approve.

2. Decide Who Responds Before a Crisis Happens

A crisis becomes harder when nobody knows who is in charge.

Your plan should assign clear roles.

One person may monitor the social media account. Another may review legal or ethics concerns. A managing attorney may approve the final public response.

The firm should also know when outside help is needed, such as cybersecurity support, insurance providers, public relations professionals, or platform support.

The ABA has recommended that law firms clearly identify who employees should contact when questions about social media content arise.

A simple approval process can prevent emotional or rushed responses.

Before posting during a crisis, ask:

• Is this accurate
• Does it reveal confidential information?
• Could it violate an advertising rule
• Does it need attorney approval
• Should this conversation move offline

Do not let the person who notices the problem automatically become the person who speaks for the firm.

3. Respond Carefully, Not Emotionally

One of the biggest social media mistakes law firms can make is reacting publicly while angry or defensive.

This is especially important with negative reviews.

The ABA noted in 2026 that lawyers generally cannot reveal information relating to a representation simply to defend themselves against an unfair or inaccurate online review.

That means a public argument can create a much bigger problem than the original review.

A better response is usually short, neutral, and professional.

Your crisis plan should include approved response principles such as:

• Acknowledge the concern
• Avoid discussing client details
• Do not argue publicly
• Correct clear public information when appropriate
• Move sensitive conversations to private channels
• Escalate serious issues internally

Remember who else is reading the response.

A negative review response is not only for the person who wrote the complaint. Potential clients are watching how your firm handles pressure.

Fun Fact: Silence Can Be Strategic

Not every comment needs a response.

Some posts are designed to provoke arguments. Others contain spam, threats, misinformation, or content that should simply be reported to the platform.

A strong crisis plan should explain when to respond, when to hide or report content, and when to say nothing publicly.

The goal is not to win every online conversation.

The goal is to protect the firm and maintain credibility.

4. Document, Review, and Learn From the Incident

Once the immediate problem is under control, the work is not finished.

Document what happened.

Save screenshots. Record the timeline. Note who responded, what actions were taken, and whether any client or firm information was affected.

This matters because social media content can sometimes become relevant evidence, and attorneys may have preservation obligations in litigation or investigations. ABA ethics guidance has emphasized the importance of preserving relevant social media material rather than simply deleting it.

Then review the incident internally.

Ask:

• What caused the problem
• Was the response fast enough
• Did everyone know their role
• Did the approval process work
• Should passwords or permissions change
• Does the firm need a new social media policy
• Can the same issue happen again

A crisis should improve your system, not simply disappear from your feed.

Your Crisis Plan Should Already Exist

The worst time to write a crisis plan is during a crisis.

Your firm should already have:

• Account access records
• Emergency contacts
• A response approval process
• Confidentiality guidelines
• Review procedures
• Cybersecurity steps
• Basic response templates
• A list of situations that require immediate escalation

The details can vary depending on firm size, practice area, jurisdiction, and the platforms you use.

But the basic principle stays the same.

Prepare before you post.

The Bottom Line

A social media crisis does not have to become a reputation crisis.

Law firms that prepare in advance can respond faster, protect client information, avoid emotional reactions, and keep small problems from becoming larger ones.

Know what counts as a crisis. Assign responsibility. Protect confidentiality. Respond carefully. Document what happened.

Social media moves fast.

Your crisis plan should move faster.

Need Assistance with Social Media and or Digital Marketing?

Leave the marketing to us so you can focus on your practice. As attorneys ourselves, we understand social media for lawyers, from creating content that is not boring and humanizing your law firm to staying inside the ethics rules; we have got it covered. Digital marketing for lawyers is a unique space that many general marketing firms do not understand. We work only with lawyers and law firms and have learned what works and what does not from firsthand experience. Let us help you build a strong online presence, attract the right clients, and ultimately stand out in a competitive market. Schedule a consultation today by clicking here.

‍