Corporate Misinformation Crisis: What to Do in the First 90 Minutes

When does a false narrative become a corporate incident?

A false narrative becomes a corporate incident when it can change a material decision by customers, employees, investors, partners or journalists—not simply when someone posts an inaccurate comment. The first task is to define the claim, identify the best available source, locate the affected audience and judge what harm could occur if the organisation says nothing.

Misinformation usually describes false material shared without a proven intent to deceive, while disinformation involves deliberate manipulation. That distinction matters to a later investigation, but guessing motive can waste the opening response window. The incident team should begin with observable facts: what is being alleged, which artefact carries it, where it is travelling and which decision it may distort. The OECD information-integrity framework likewise treats source transparency, resilience and institutional capacity as connected issues rather than reducing the problem to removing individual posts.

The 90-minute window in this guide is an operational target, not a statutory deadline or a universal research finding. It gives communications, operations, legal and executive owners a shared clock for verification and response. Where personal safety, regulated disclosure, market-sensitive information, health, privacy or law-enforcement duties apply, the authorised specialist and the relevant formal deadline take precedence.

Use five questions to decide whether to activate the incident route:

• Claim: What exactly would a reasonable reader believe after seeing the content?
• Origin: Is the first post you found also the original source?
• Movement: Is the narrative confined to one account or crossing platforms and newsrooms?
• Consequence: Could it affect safety, purchase, employment, reputation or a regulated decision?
• Authority: Does the organisation own the records needed to establish the fact?

An implausible post with no traction may gain an audience if the brand repeats it from a large account. A fabricated recall notice, a false closure claim or an edited executive recording has a different risk because people may act on it. Reach matters, but it should never replace an assessment of credibility, direction of travel and severity.

What should the team preserve in the first 15 minutes?

In the first 15 minutes, the team should preserve the original claim, timestamp, account, media artefact and early distribution trail before debating public language. A screenshot is useful but incomplete; record the direct URL, visible account identity, publication and capture times, full wording, the earliest retrievable version and the person who first escalated it.

If a post may disappear, a page export or screen recording can preserve context. Collection should still be proportionate: do not spread private information through a large crisis chat or copy personal data that the team does not need. For an image, audio clip or video, retain the highest-quality available file and look for an earlier appearance, a different location or an edit that changes meaning.

The CISA Rumor Control Start-Up Guide asks whether the organisation has the expertise and responsibility to distinguish the narrative, whether it is moving across platforms, and whether physical or reputational consequences are plausible. It was written for US election officials, not as a corporate rulebook. Its authority-trend-consequence test can still sharpen an incident assessment when adapted with that limitation in view.

Name one incident owner and one source of truth. Social, customer service and senior leaders should not draft competing replies in parallel. Route incoming questions into a shared log, send employees a short instruction on where to direct enquiries and record what remains unknown. Until the evidence supports the label, describe the material as an unverified claim rather than declaring malicious fabrication.

How should facts and impact be tested between minutes 15 and 30?

Between minutes 15 and 30, every part of the allegation should be matched to the person or system that owns the primary record, while impact is scored separately from factual certainty. Operations may verify a closure; quality or safety teams a product issue; the original recording an executive quote; finance an authorised market statement; and human resources plus counsel an employment claim.

Break compound statements apart. “The company is closing every shop” contains at least five questions: how many locations, in which market, temporarily or permanently, whether a decision is final, and who can announce it. A true detail does not validate the entire narrative. Equally, a recycled photograph does not prove that every concern attached to it is false.

A simple two-axis grid keeps urgency visible. Score the severity of the possible consequence on one axis and the likelihood of wider distribution on the other. Low-severity, low-spread material may be monitored. A severe claim in a narrow expert community may require direct outreach. A fast but low-impact rumour may be met by a concise source page. High severity and high spread require executive ownership and specialist review.

Evidence must be current, attributable and explainable. An old slide, an unsourced spreadsheet or an internal forecast cannot support a categorical public statement. FL PR’s guide to international PR strategy from Türkiye shows why a verified core and market-specific context have to be built before distribution.

How do you choose between correcting, holding and escalating?

Between minutes 30 and 60, the organisation should choose one of three routes: correct when the record is clear, issue a timed holding statement when essential verification is still under way, or escalate when the possible harm requires executive and specialist authority. Answering every rumour can amplify noise; monitoring a decision-critical falsehood without a threshold can be just as damaging.

The UK Government Communication Service’s RESIST 2 counter-disinformation toolkit links recognition, early warning, impact analysis, strategic communication and effectiveness tracking. It was designed for public communicators. For a company, the transferable principle is to choose an intervention according to audience and harm, rather than according to the post with the largest visible number.

• Correct: The organisation owns the fact, evidence is available and the error is influencing a decision.
• Hold with a deadline: Verification is active, delay may create harm and the team can commit to the next update time.
• Contact narrowly: The story is small but has reached a critical customer, employee, investor or journalist group.
• Escalate: Safety, privacy, market disclosure, alleged crime, litigation or regulatory notification may be involved.
• Monitor: The claim is low-harm, isolated and likely to gain reach if repeated by the company.

A useful holding statement contains four things: what the organisation is aware of, the facts confirmed so far, the point still being checked and the time of the next update. “We are investigating” without a decision-relevant fact or a return time leaves the audience to fill the gap. Do not speculate about cause, blame or scale.

For a cross-border incident, write each language from the same evidence record instead of translating syntax word for word. Explain local institutions, time zones and product names that an overseas reader may not recognise. FL PR’s international PR and digital-source framework is relevant because it connects market context with a durable, discoverable record.

What should be published between minutes 60 and 90?

Between minutes 60 and 90, publish a correction that leads with the verified fact, shows the supporting source and tells the affected audience what to do without reproducing the false claim more widely than necessary. Social replies can point to it, but a removable post should not be the organisation’s only evidence page.

A question-led headline often works: “Has product X been recalled?” or “Is service Y unavailable?” The first paragraph answers it. The next lines state timing, affected scope, record owner and any required customer action. If privacy or safety limits disclosure, say what cannot be shared and why; do not replace the missing detail with confidence language.

If the inaccuracy has entered a news report, ask for a material correction rather than editorial approval. The Reuters Journalistic Standards put accuracy before speed and require errors to be corrected promptly, clearly and comprehensively. A corporate correction request should be equally precise: quote the error, provide the correct fact, attach the primary source and make one proportionate request.

Channel order depends on the decision at risk. Direct customer contact may lead where people must take action. Employees should hear internally before a public executive post if the allegation concerns them. A named editor should receive evidence when a newsroom has published the error. FL PR’s international media interview brief explains how source, quotation and correction ownership can be agreed before an interview begins.

Keep one message owner. The chief executive, brand account and service team must not publish different dates or scope. Their tone and length may differ by channel, but the factual core remains fixed. Avoid quote-posting a dramatic image to denounce it; lead with the verified record and a useful action.

How should the response be measured after 90 minutes?

After 90 minutes, measure whether accurate information reached the people who needed it, whether harmful uncertainty fell, and whether the organisation changed the process that allowed the gap—not merely whether the original post disappeared. A large correction view count does not by itself demonstrate restored trust.

Maintain a timeline for detection, escalation, verification, decision, publication and major updates. Track platform crossover, new variations, journalist enquiries, service contacts, employee questions and false sources appearing in search. Then log adoption: was an article corrected, did a platform attach context, did partners use the source page, and did repeated questions move toward the verified fact?

A short review on the next working day should answer:

• Which team saw the first signal and how quickly did it reach the accountable owner?
• Which primary record accelerated the decision and which record was missing?
• Did the intervention unintentionally introduce the narrative to a new audience?
• Did every language preserve the same fact, scope and update time?
• Which source page, approval route or role must change before the next incident?

Update evidence pages, spokesperson lists and the approval matrix while the lesson is fresh. FL PR’s global communications planning guide helps define how a common evidence core and local market ownership can work together. Prepared records prevent the next opening half hour from becoming a search through old presentations.

A credible misinformation response does not have to be the loudest voice. It chooses a threshold, exposes the evidence, states uncertainty honestly and gives the affected person a clear next step.

Frequently Asked Questions

These answers summarise the main decisions in the first 90 minutes of a corporate misinformation incident.