The damage is rarely the incident. It is the twelve hours of silence afterwards.
Most brand crises are survivable. What turns a bad day into a lasting reputation problem is a predictable sequence: something happens, nobody is sure who decides, the brand says nothing, the silence gets interpreted, and by the time a statement appears it is answering a story that has already been written without you.
The fix is almost entirely preparation. Here is the plan.
Before anything happens
Thirty minutes of work now, and none of the rest of this is improvised:
- Name the decision-maker and one backup. Not a committee. One person who can approve a public statement without asking anyone.
- Name the single voice. Who speaks publicly, and who never does.
- Write the holding statement template now, while calm. You will fill in three blanks later.
- List your channels and who has access to each, including the accounts a departed employee might still control.
- Know your legal and insurance contacts before you need them at 9pm.
The first hour: establish facts, buy time
- Find out what actually happened. Not what someone thinks happened. The single most common error is responding to an incorrect early account.
- Pause scheduled content. All of it, everywhere. A cheerful promotional post landing mid-crisis is the screenshot that circulates.
- Do not delete anything. Deleting looks like concealment and is often discoverable anyway. Screenshot everything for your own record.
- Assess honestly: is anyone harmed, is there legal exposure, is it spreading, and is it actually about you? Some things feel enormous internally and are invisible outside.
- Post the holding statement if it is public and spreading. Acknowledge, state you are looking into it, say when you will update. That is all.
The holding statement
Three sentences, and no more:
- We are aware of [the specific thing, named plainly]
- We are [looking into it / in contact with those affected / working to fix it]
- We will update by [a specific time you will actually meet]
What must not appear in it: an excuse, a defence, blame directed anywhere, the phrase "we take this seriously", or any claim you have not verified. If you name a deadline, meet it — a missed update is a second incident.
The rest of the first day
- Tell your team before they read it online. Staff hearing about it externally is how internal screenshots reach journalists.
- Contact anyone actually harmed, directly and first. Before the public statement if at all possible. This is both the decent thing and the single most effective de-escalation available.
- Brief whoever answers the phones and DMs with an approved line and a clear instruction to escalate rather than improvise.
- Publish the substantive statement once facts are established: what happened, what you are doing, what changes.
- Keep responding in the same place it started. If it began in comments, answer in comments — not only in a press release nobody in that thread will read.
What never to do
- Argue in public. You will not win, and the argument becomes the story.
- Delete critical comments that are not abusive. Screenshots of removed comments spread further than the originals.
- Issue a non-apology. "We are sorry if anyone was offended" reliably makes things worse.
- Blame an employee publicly. Even when accurate, it reads as an organisation that will not stand behind its people.
- Go quiet for days and return as if nothing happened.
- Let lawyers write the public words. Take their advice on exposure, then write it in human language.
Scale the response to the actual size
Not everything is a crisis. A handful of angry comments is customer service. One bad review is Tuesday. Over-responding turns a minor complaint into a public event and signals that criticism gets a reaction.
The test: is it spreading beyond people already involved, is anyone harmed, and is it being picked up anywhere with an audience? If none of those, handle it privately and well.
Afterwards
Two weeks later, publish what changed — briefly and without drama. A brand that visibly fixed something recovers most of what it lost. One that apologised and changed nothing is judged on the next incident as a pattern.
Then rebuild in the ordinary way: consistent good work, answered reviews, visible service. Reputation repairs through accumulated evidence, not through a statement.
The bottom line
Decide who speaks before you need to know. Establish facts before responding. Acknowledge fast, promise an update, and meet the deadline. Contact the harmed directly and first. Then fix the thing and say what you fixed.
For the day-to-day version of this, see responding to reviews.
Want a crisis plan written before you need one? Let's talk.