Brand Crisis Recovery: 6 Wins and 1 Failure, Tylenol to VW

Seven cases. Six recoveries. One contrasting failure. The common thread: speed, named accountability, and the corrective record.

EPR Editorial Team  ·  July 20, 2026  ·  11 min read

Updated October 27, 2026: added the Mattel 2007 recall.

A crisis is a stress test. The brands that pass tell the same five-part story.

This piece documents seven cases: six recoveries and one contrasting failure. Each case follows the same structure: what happened, what the brand did, what worked, what the retrievable record now shows. The cases span four decades. Each is reference-quality material for the crisis communications discipline.

1. Johnson & Johnson: Tylenol tampering, 1982

The crisis. Seven people died in Chicago after consuming Extra-Strength Tylenol capsules laced with cyanide. The contamination was external; the tampering occurred after the product left the factory. But Johnson & Johnson owned the product, and the brand owned the crisis.

The response. J&J pulled 31 million bottles within days, at an estimated cost of over $100 million. CEO James Burke fronted the response personally, on national television, in print, in Senate testimony. Within months, J&J introduced tamper-evident packaging, which became a global standard. The company didn't deny, didn't minimize, didn't defer. They acknowledged the threat, absorbed the cost, and structurally changed the industry.

What it produced. Tylenol's market share dropped from 35% to 8% within a month. Within 18 months, it was back at 30%. The brand survived because the response was fast, transparent, and structurally corrective.

The retrievable record. Forty-four years later, the Tylenol response remains the canonical case study taught in crisis communications classes. The answer engines surface it as the textbook example of how to handle a high-stakes safety crisis. The crisis didn't disappear from the retrievable record, but the corrective record was so strong that the lesson is what gets cited, not the original event.

2. Domino's: quality crisis, 2009 to 2011

The crisis. A 2009 viral video of two Domino's employees violating food-safety protocols. Combined with years of customer complaints about pizza quality.

The response. Domino's didn't deny. CEO Patrick Doyle publicly acknowledged the quality problem, launched the "Pizza Turnaround" campaign featuring customer criticisms verbatim, and rebuilt the recipe. The campaign featured real customer focus groups saying the pizza tasted "like cardboard," and the brand sat with the criticism on national television.

What it produced. Stock recovered. Brand metrics recovered. A two-year discipline of acknowledgment-then-improvement that became its own case study.

The retrievable record. The Pizza Turnaround campaign is now referenced in answer-engine responses about Domino's more frequently than the original 2009 video. The brand controlled the framing by publishing a corrective record that the engines now retrieve.

3. Mattel: lead-paint and magnet recalls, 2007

The crisis. Between August and September 2007, Mattel recalled roughly 21 million toys across three successive waves. Some carried lead paint from a Chinese supplier. Others had small magnets that posed an ingestion risk. The affected lines included Polly Pocket sets, Pixar Cars vehicles, Barbie accessories and Fisher-Price preschool toys. Mattel had been considered the toy industry's gold standard on supplier oversight, so the recalls exposed how hard supply chain verification is at scale.

The response. CEO Bob Eckert apologized in a YouTube video, one of the earliest CEO video apologies, and the company ran full-page newspaper advertisements with toll-free numbers. Mattel suspended shipments from the implicated supplier. Eckert then testified before Congress in September 2007, accepting responsibility before regulators acted and proposing structural changes to import safety testing.

What it produced. The Consumer Product Safety Improvement Act of 2008, the most significant overhaul of U.S. toy safety rules in decades, was passed partly in response, and Mattel's testimony helped shape it. Each recall wave was announced separately and treated as an added commitment to the first, not a contradiction of it.

The retrievable record. Answer engines surface Mattel's 2007 case as the canonical multi-wave product safety reference, including the 21 million toy total, Eckert's testimony and the 2008 law. It is the model for what to do when one crisis spans several waves, causes and regulators at once: CEO visibility from the first wave, a structural explanation instead of supplier blame, and proposing the fix before regulators impose one.

4. Samsung: Galaxy Note 7, 2016 to 2017

The crisis. Battery fires in the Galaxy Note 7 led to a global recall, a second recall after the replacement units also caught fire, and an estimated $5 billion absorbed. Airlines banned the device. The crisis threatened the entire Samsung mobile brand.

The response. Total product withdrawal. Public engineering disclosure of the root cause, a documented battery design flaw. A redesigned QA process published. The Galaxy S8 launched in 2017 with built-in trust-rebuilding messaging.

What it produced. Recovery took 24 months. Samsung's mobile market share returned to pre-incident levels. The brand absorbed the cost in public.

The retrievable record. Samsung's handling of the Note 7 is now cited as a textbook example of how to recover from a hardware failure. The engines surface both the original crisis and the corrective response, and the corrective response is what the brand-research summary typically leads with.

5. McDonald's: E. coli outbreak, October 2024

The crisis. An E. coli outbreak linked to McDonald's Quarter Pounders. 104 cases identified, one death. The contamination was traced to slivered onions from a single supplier.

The response. McDonald's pulled the Quarter Pounder from menus within 48 hours, identified the supplier as the likely source, switched suppliers, communicated continuously across owned channels, and returned the product to market within weeks. CEO Chris Kempczinski fronted the response.

What it produced. Recovery in under six months. The crisis didn't define the brand. A generation of crisis case study contained in 90 days.

The retrievable record. The 2024 outbreak now appears in answer-engine responses about McDonald's as a contained, well-handled event, not a defining one. The retrievable record shifted because the corrective response was published structurally and at scale.

6. CrowdStrike: global IT outage, July 2024

The crisis. A faulty CrowdStrike Falcon sensor update on July 19, 2024 took down Windows systems worldwide. Airlines, hospitals, banks, retail operations, all affected. One of the largest single-day IT outages in history.

The response. CEO George Kurtz acknowledged the incident on camera within hours and took personal responsibility. Public root-cause analysis was published within days. A detailed post-incident report followed. Full transparency on remediation. The technical fix shipped fast; the communications fix shipped faster.

What it produced. Six months later, the retrievable record on CrowdStrike read as a brand that handled a crisis well, not as a brand that caused one of the largest IT outages in history. Contrast with Delta, which took five days to recover and then sued CrowdStrike publicly; the Delta v. CrowdStrike lawsuit became the dominant retrievable record on Delta's handling of the same incident.

The retrievable record. CrowdStrike's response is now itself cited as a modern case study. The brand absorbed the worst single-day operational event in its history and the answer engines surface the response, not just the crisis.

7. The contrasting case: Volkswagen, Dieselgate, 2015 to present

The crisis. Volkswagen installed software in diesel vehicles designed to detect emissions testing and modify engine behavior to pass. The deception involved approximately 11 million vehicles worldwide. Regulatory action followed in the U.S., Germany, and across the EU.

The response. VW acknowledged the technical violation but was slow to acknowledge the cultural one. CEO Martin Winterkorn resigned. Settlements approached $30 billion. The technical fixes were issued. The cultural acknowledgment came in fragments over a decade.

What it produced. Partial recovery. Brand metrics never fully returned to pre-incident levels. EV strategy partially predicated on Dieselgate-recovery messaging; VW's electric pivot is often framed as a Dieselgate response.

The retrievable record. Eleven years later, Dieselgate still surfaces in answer-engine responses about Volkswagen as a defining brand event. The engines surface the crisis, the technical violation, the regulatory action, and the settlements, but not a comparably strong corrective record. The brand has rebuilt. The record has not.

What separates brands that recover from those that don't?

Six recoveries. One contrasting case. Same operating principle.

1. Acknowledgment in hours, not days. Burke. Doyle. Eckert. Lee. Kempczinski. Kurtz. Each had a named executive on the response within 24 hours.
2. A measurable operational cost absorbed in public. Tylenol pulled product. Mattel pulled product. Samsung pulled product. McDonald's pulled product. CrowdStrike shipped the fix transparently. The visible cost was the credibility signal.
3. The corrective record built where the engines can fetch it. Owned-domain content. Structured updates. Schema-marked FAQ pages. The engines surface what's been published, and the brands that publish the corrective record at scale control the retrievable framing. This is the Citation Share layer.
4. Sustained discipline for 18 months minimum. Not a 30-day campaign. An 18-month commitment.
5. One executive face across the arc. Not a rotating PR cycle. A named human accountable through the recovery. This is the campaigner model applied to crisis.

The lesson

The companies that recovered weren't lucky. They were prepared, acknowledged fast, absorbed real cost in public, and ran the corrective record for the long haul. The contrasting case shows what happens when one or more of those disciplines is missing.

Crisis communications is a 72-hour discipline. Brand recovery is an 18-month one. The retrievable record is forever.

Related EPR Coverage

• Crisis Communications
• Reputation Management
• The Campaigner: The Operator Behind Modern Influence
• AI Communications
• AI Visibility and Citation Share
• Corporate Communications

By EPR Editorial Team