Crisis PR for small businesses: what to do in the first 48 hours

The short answer

Crisis communication for a small business is a short, accurate first statement, then regular updates. The Institute for Public Relations' crisis guide says to respond within the first hour, check every fact and keep every spokesperson consistent. No study defines a 48-hour rule, so treat 48 hours as a working window for the first updates.

Blue Leopard Media does not run live crisis response. Its reputation management service comes afterwards, publishing accurate, labelled features under your name. It does not remove or suppress anyone else's articles.

The first hour

The IPR guide lists three points for an initial response: be quick, be accurate and be consistent. It adds that speed is meaningless if the information is wrong. People want to know what happened, and if you say nothing, the news media and others fill the gap. Ready.gov says to decide in advance who will speak to the media and to keep messages consistent.

• Confirm the basic facts, and write down what you do not yet know.
• Name one spokesperson and brief them, so everyone says the same thing.
• Post a short holding statement: what happened as far as you know, what you are doing and when you will update. Leave out guesses and blame.
• Put safety first if anyone is at risk.

There is a reason to speak first. An experiment summarised in the IPR guide found that an organisation that released the crisis information itself earned higher credibility ratings than one whose news was reported by others first.

Hours 1 to 48: who to tell, in order

1. Staff. The IPR guide says to include employees in the initial response. Well-informed employees are also a channel to everyone else, and they will be asked.
2. Customers and suppliers. Say what affects them and what to do. Ready.gov suggests listing each audience, what it needs to know and who speaks to it, with contact details gathered in advance.
3. Police, regulators and your lawyer, where they apply. For a data breach the FTC's guide says to secure your systems, consult legal counsel early, contact law enforcement, notify affected people promptly and give them one point of contact.
4. Everyone, again. Deliver every update you promised. The IPR post-crisis list starts with delivering all promised information as soon as it is known.

Keep out guesses about cause or blame. Ready.gov suggests pre-scripted messages approved by management, which are easier to send quickly when the facts arrive. Where legal exposure is possible, have a lawyer read the statement first. This guide is not legal advice.

After the first 48 hours: search results

A crisis often leaves a news story or review near the top of the results for your name. Google's help page says it usually removes content that breaks its rules, but if content is about something important or newsworthy, Google might not take it down. Only the site that hosts a page can delete it. Our guide to removing negative articles from Google explains what can be removed.

What we do instead is add. Our reputation management service publishes accurate, labelled features under your name, from $249 each or three for $499, with a plan for which titles to use and in what order. First movement can take weeks and stubborn results months, and we promise no ranking.

How the options compare

How the options compare:

The crisis firm price is everything-pr's October 2026 estimate, not a rate card. If an incident has press attention or legal exposure, hire from the first column. Once the facts are settled and you want accurate pages under your name, use the button below.