Consultation
Crises8 September 20266 min read

The first 72 hours of an information attack: what to do and what to avoid

A planted story, a wave of articles, reposts across channels. The first three days decide whether it becomes the story of the week or remains an episode.

IMG 0116:9
Article cover for “The first 72 hours of an information attack: what to do and what to avoid”

First 6 hours: record everything

  • Save every publication: screenshots, links, timestamps
  • Identify the original source and how it spread
  • Assess the audience: clients, partners, banks, journalists
  • Don’t respond publicly until the picture is clear
IMG 0216:9
Illustration for “First 6 hours: record everything”

6–24 hours: your position

Prepare a short statement backed by facts and documents. There is no need to respond to every post. What you need is one place where your position is published and where questions can be directed: your website, an official channel or your press office.

A late statement is worse than a short one. A rebuttal published a week later goes unread.Estena’s position
We can help with this24/7 mention monitoringHear about a new mention before a bank or a journalist does
IMG 034:3
Example or diagram for “6–24 hours: your position”
IMG 044:3
Detail for “6–24 hours: your position”: a document, a screen, an interface

24–72 hours: sources and legal assessment

  • Assess whether there are grounds for removal: inaccuracy, personal data, breaches of platform rules
  • Prepare requests to the platforms
  • Check what AI models are saying: they pick up fresh coverage quickly
  • Brief key partners and your bank if the attack may reach them
IMG 0516:9
Illustration for “24–72 hours: sources and legal assessment”

What not to do

  1. Don’t threaten publications publicly
  2. Don’t post fake reviews or comments in your own defence
  3. Don’t delete your own old material in a panic: it looks like a cover-up
  4. Don’t get drawn into arguments in the comments
IMG 0621:9
Closing illustration for “What not to do”: a diagram or checklist

Frequently asked questions

Should we go to court straight away?

Not necessarily. Litigation is slow and can itself become a reason for new coverage. The decision should follow a legal assessment.

Can monitoring prevent an attack?

Not always, but it buys time: you learn about a planted story within hours, not a week later.

What to do next

If you recognise your situation, start with an audit: in five business days we will show you what a bank, a partner and an AI model see about you.

24/7 mention monitoringHear about a new mention before a bank or a journalist does
Learn more →

Tell us about your situation. We reply within one business day.

The first meeting is free and carries no obligation. We sign an NDA before you share any details.

TELEGRAM  @estena
E-MAIL    hello@estena.agency
OFFICES   Moscow · Tbilisi · Dubai

By clicking the button, you agree to our privacy policy.