June 3, 2026

Classified information PR is the discipline that most defense and national security agencies handle informally, right up to the moment a breach makes it impossible to ignore. The cost of that informality is now public record. On March 15, 2025, Secretary of Defense Pete Hegseth shared live military operational details, aircraft types, missile specifics, and strike timing in a Signal group chat on an unapproved commercial platform. The editor-in-chief of The Atlantic, who was accidentally added to the group, received the information hours before the U.S. launched airstrikes against Houthi rebels in Yemen. Security experts described it immediately as “an extraordinary breach of U.S. security.” John Bolton, former National Security Adviser, told NPR: “These are absolutely basic things. Yet these are Cabinet-level people in our government, and yet not one of them ever said, ‘Why are we on Signal?’” Sophisticated adversaries did not cause the breach. A failure in the classified information PR discipline caused the breach. Specifically, a failure to apply the basic protocols designed precisely to prevent this kind of exposure. The communications response that followed significantly compounded the damage. This article shows you what classified information PR actually requires and how to build the discipline that prevents both breaches and the crises that follow. Why Classified Information Breaches Are Always a Communications Failure Security experts distinguish between breaches caused by sophisticated adversaries and breaches caused by human error. The Signal incident of March 2025 belonged firmly in the second category. The Pentagon confirmed this in its own memo, issued on March 18, 2025, three days after the breach. The memo stated that “third-party messaging apps (e.g., Signal) are NOT approved to process or store nonpublic unclassified information.” That policy predated the breach. The memo also reiterated the well-established approved alternatives. Sensitive Compartmented Information Facilities (SCIFs), secure video teleconference systems, and official classified communications networks that senior officials can access even while traveling. These secure rooms are built to discuss classified information,” NPR’s national security correspondent Greg Myre reported. “You can’t take a phone into these rooms. You can’t take documents out, and all of these top-ranking national security officials have SCIFs at their offices and at their homes.” The breach happened not because the right systems did not exist. It happened because senior officials chose convenience over protocol, and because no one in the group ever raised the question of whether Signal was an appropriate channel. Furthermore, in an era when, as DefenseScoop reported in March 2025, “China, Russia, North Korea and Iran are constantly working to intercept U.S. communications for their benefit. Officials who choose to conduct sensitive discussions on a commercial app commit a classified information PR failure before they send the first message. The public communications failure that followed- four senior officials delivering four contradictory statements within hours, then transformed a security incident into a sustained institutional credibility crisis that lasted months. Read Also: Government Crisis Response: Why 73% Fail & How to Fix It The Anatomy of a Classified Information PR Crisis Understanding how classified information PR crises develop helps you build the prevention and response systems that contain them. Three stages define every significant classified information breach from a communications standpoint: 1. The breach itself Classified information reaches an unintended audience, whether through technical failure, human error, deliberate leaking, or, as in the Signal case, a combination of protocol failure and carelessness. 2. The disclosure and initial response The moment the breach becomes publicly known, the classified information PR response must be activated. This is the phase where most institutions fail. The 2025 Signal response demonstrated every common failure simultaneously: According to Red Banyan’s crisis communications analysis of the incident, the administration’s handling underscored a core principle. Unified messaging is the cornerstone of effective crisis management for classified information crises. 3. The sustained credibility crisis When Stage 2 fails, Stage 3 begins. The story shifts from the breach itself to the response, and then to broader questions about institutional competence, leadership integrity, and systemic security culture. The Signal breach entered Stage 3 within 48 hours. Senate hearings. Congressional investigations. A Pentagon-wide email warning about Signal vulnerabilities. A memo ordering an investigation into “recent unauthorized disclosures of national security information. Each development prolonged the crisis and deepened the damage to credibility. This progression is not inevitable. It is the direct result of an inadequate classified information PR strategy at Stage 2. Building a Classified Information PR Framework Communications teams do not improvise classified information PR during a crisis. They build it before any breach occurs, just as operational security teams build protocols before a mission launches. Below is the framework that protects both sensitive information and institutional credibility: 1. Prevention – Communication Protocol Enforcement The first line of classified information, PR defense, is protocol compliance. Every person with access to sensitive or classified information must clearly understand which channels are approved for which categories of information. This means more than a written policy. It means regular, mandatory training that covers: The 2023 Jack Teixeira case, in which a 21-year-old Air National Guard IT specialist removed classified documents from a base and photographed them for a private Discord server, demonstrated that classified information PR failures occur at every level of access. Approximately 1.3 million Americans hold top-secret clearances, according to the Office of the Director of National Intelligence. Protocol training and accountability must reach all of them. 2. Detection – Early Warning Communications Monitoring The second tier of classified information PR protection is monitoring. This means: The Signal breach was discovered not through internal monitoring but by the journalist who received the information. That is the worst-case detection scenario. A properly structured monitoring function gives institutions lead time, sometimes hours, to assess and respond before information becomes fully public. 3. Response – Unified Crisis Communications When a classified information breach occurs, the response phase determines whether the incident remains contained or escalates into a sustained institutional crisis. The response framework must include: Additionally, the holding statement approach is critical. The initial public response