Skip to content
RCA Courtiers
ADVICE 5 min read

Confidentiality breach during a sale: how to respond

Confidentiality has been compromised? Don't panic. The 5 immediate steps and the script for communicating with your employees.

RCA Courtiers

An employee just told you: “I heard you’re selling the business.”

Your first reaction will shape everything that follows. Don’t deny it. Don’t panic. Follow a plan.

In a Quebec SME, where business networks often overlap — shared suppliers, employees who know each other, clients in the same circle — a leak rarely stays local for long. The broader framework of confidentiality in a business sale explains why it matters so much; this article covers what to do when it’s already been compromised.


How leaks happen

Confidentiality leaks during a sale process are more common than people think — even with a signed NDA (non-disclosure agreement).

The most common sources:

  • The owner themselves: a conversation with a “trusted” friend, a business partner, a family member. Information travels faster than you’d expect.
  • An observant employee: unusual meetings, documents left open on a desk, a shift in the owner’s behaviour. Employees aren’t fooled.
  • A potential buyer: they mention the file to someone in the industry — intentionally or not. The SME market in some sectors is small.
  • A professional: a CPA, a lawyer, or a banker who mentions the file in the wrong place or to the wrong person.
  • Accumulated suspicions: sometimes no one has actually “talked” — but a series of signals creates rumors.

An NDA gives you legal recourse after the fact. But it doesn’t prevent the leak.

That’s why managing confidentiality is an active process — not just a signed document.


The real consequences of a leak

The consequences aren’t theoretical. They’re concrete, and they can show up within days.

Key employees start looking elsewhere. An employee who learns the business is for sale asks themselves one question right away: “Is my job at risk?” If they don’t get a reassuring answer, they take matters into their own hands — and in a Quebec SME with revenue above $3 million, losing an operations director or a controller in the middle of a sale process can directly cut into transaction value.

Clients get nervous. An important client who hears the news may reach out to a competitor — not out of malice, but out of caution.

Suppliers tighten terms. A supplier who doubts the business’s continuity may ask for faster payments or reduce credit lines.

The buyer gains leverage. A buyer who knows the leak has weakened the seller has an advantage. The seller is under pressure to close quickly — and pressure never works in favour of price.

Performance can drop. If employees, clients, or suppliers react to the rumor, operations suffer — and a declining EBITDA during the process translates directly into a price adjustment.


The 5 immediate steps

If confidentiality has been compromised, here’s what to do — in order.

1. Assess the scope

Who knows what? Is it a vague rumor (“I heard that…”) or confirmed information (“I saw the document”)? How many people are aware?

The answer to these questions determines the scale of the response you need.

2. Control the source

Where is the leak coming from? If it’s identifiable — a buyer who talked, an indiscreet professional — shut it down immediately.

If it’s a buildup of suspicions with no clear source, control comes through communication (step 3).

3. Communicate with the people affected

Key employees first. Then, if necessary, important clients and suppliers.

The detail of this communication is covered in the next section — it’s the most delicate moment.

4. Adjust the sale strategy

A leak changes the picture. With your broker and your advisors, assess:

  • Should you speed up the process to close before the situation deteriorates?
  • Should you adjust the price or terms to reflect the new reality?
  • Should you widen the buyer pool to keep negotiating leverage?

5. Assess the impact on the transaction

Is the deal still viable on the same terms?

If the leak has caused key employees to leave or clients to pull back, the buyer will reassess. Better to take the measure of it quickly than to discover it at the negotiating table.


Communicating with employees after a leak

This is the most delicate moment in the whole situation.

What to say

Something like:

“Yes, we’re exploring different options for the future of the business — like a lot of well-run companies do.”

Or:

“Exploratory discussions are under way. Nothing has been decided. Your job matters in any conversation we’re having.”

What NOT to do

Deny it if it’s true. A denial that collapses destroys trust for good. If the employee knows you’re lying, you lose their loyalty — and probably the employee.

Share too much detail. The price, the buyer’s identity, the exact timeline — those details aren’t for employees at this stage. Too much information creates anxiety, not trust.

The right middle ground

Measured transparency. Yes, something is happening. No, nothing has been decided. Yes, their contribution is valued.

It’s a message you can repeat — because it’s true.

The exact calibration of that transparency — who to inform, in what order, with what level of detail — varies depending on when the leak occurs in the process. The full logic of when to inform employees about the sale of an SME also applies in reactive mode after a leak, with a few adjustments.


Preventing future leaks

A leak is a signal: the protection process needs to be reinforced.

  • Tighten the NDA clauses: strengthen the non-solicitation clause and harden the consequences of a violation for buyers still involved in the file.
  • Limit access: strict need-to-know. The fewer people who know, the lower the risk.
  • Route all communication through a business broker in Quebec: the buyer never contacts the seller, employees, or clients directly — the broker becomes the single point of entry.
  • Control the virtual data room: logged access, information shared in stages — not all at once.
  • Compartmentalize: each phase of the process only grants access to what’s needed for that phase.

Perfect confidentiality doesn’t exist. But a rigorous process reduces the risk — and when a leak does happen, a structured response limits the damage.

If you’re dealing with a leak and want to structure your response, a confidential conversation with a broker can help you assess your options.


Key takeaways:

  • A leak isn't the end of the process — but it demands an immediate, structured response
  • 5 steps in order — assess, control, communicate, adjust, assess the impact
  • Never deny it if it's true — measured transparency builds more trust than denial
  • Prevention is an active process — NDA, broker, virtual data room, strict need-to-know

Stay informed on M&A trends in Quebec — our quarterly newsletter.

No spam. Unsubscribe anytime.

Ready to explore your options?

Confidential valuation, no fees, no commitment.

Free valuation

Confidential · Response within 48h · No commitment