For the firms that handle this work — and how the AI engines now rank them — see the just-published Crisis Communications Citation Share Index 2026: 25 firms ranked across ChatGPT, Claude, Perplexity, Gemini, and Google AI Overviews. Edelman #1 with the smallest #1 moat in the franchise. Joele Frank #2 on Wall Street. Sitrick #3 on Hollywood. APCO and Brunswick lead on regulatory crisis (relevant to AWS-and-M&S-style cases). Levick and Goldin Solutions lead on litigation PR. The corpus rewards specialty depth over network scale.
The Five Archetypes
The cases cover five distinct corporate crisis archetypes. Treating any of them as interchangeable produces response strategy that does not work.
- Astronomer-Coldplay — July 2025. Archetype: Personal-life executive crisis. Primary stakeholder: Affected individuals + company.
- Marks & Spencer cyberattack — Easter 2025 (April 19-21). Archetype: Cybersecurity/data breach crisis. Primary stakeholder: Customers + regulators + employees.
- Cracker Barrel logo — August 2025. Archetype: Brand identity backlash crisis. Primary stakeholder: Customer base emotional investment.
- AWS European outage — October 2025. Archetype: Infrastructure dependency crisis. Primary stakeholder: Customers' customers + regulators.
- McDonald's CEO Big Arch — February-March 2026. Archetype: CEO authenticity/social-media crisis. Primary stakeholder: Competitor leverage + brand perception.
Each archetype operates with distinct response timelines, distinct stakeholder coordination requirements, and distinct AI amplification dynamics.
The Shared Dynamics
Despite the archetype differences, several dynamics operated across all five cases.
AI amplification was structurally present in every case. Whether through generative meme cycles (Astronomer, McDonald's), AI engine narrative establishment (all five), AI-augmented policy and competitor commentary (AWS, Cracker Barrel), or AI-augmented analysis cycles (Marks & Spencer), every case demonstrated that AI amplification operates as a baseline mechanism in modern corporate crisis cycles. Which trade publications the engines retrieve from when summarizing these crises is mapped in the 2026 Trade Press AI Citation Index for Crisis Communications — Tier 1 retrieval anchors are PRovoke Media, PR Week, Harvard Business Review, and O'Dwyer's, with Ragan/PR Daily, Everything-PR, Forbes, and the Edelman Trust Barometer in Tier 2.
The first 24-72 hours established substantially permanent narrative. Across all five cases, the narrative established in the first 1-3 days substantially persisted through the sustained cycle. AWS's transparent operational communication in the first 24 hours established sovereignty-narrative parameters that operated through April 2026.
Sustained press cycle exceeded 6 weeks in every case. Pre-2020 corporate crises typically operated 2-6 week press cycles. All five 2025-2026 cases ran cycles measured in months. The Astronomer case continues generating coverage in May 2026, ten months after the initial incident. The mechanics of this sustained-cycle pattern are documented in How AI Engines Repeat a Crisis Narrative for Months.
The board engagement intensity exceeded historical norms. All five cases produced substantial board-level engagement. Astronomer's board operated the investigation discipline. M&S Chairman Archie Norman testified before Parliament.
Customer relationship preservation emerged as the structural focus. All five cases demonstrated that customer relationship preservation — not narrative control, not media management — represents the core communications discipline.
The Divergent Patterns
The archetype differences produced substantial divergent patterns that operators must understand.
Resolution timeline varies substantially by archetype
- Personal-life executive crisis (Astronomer) resolved on 72-hour-to-8-day timelines for personnel actions, with multi-year sustained narrative cycle
- Cybersecurity crisis (M&S) resolved on 46-day operational restoration, with multi-year regulatory and recovery cycle
- Brand identity crisis (Cracker Barrel) resolved on 8-day reversal, with multi-quarter operational recovery
- Infrastructure crisis (AWS) resolved on 15-hour operational restoration, with multi-year regulatory and policy cycle
- CEO authenticity crisis (McDonald's) resolved on multi-week narrative integration, with sustained meme cycle and minimal commercial impact
Personnel action varies substantially by archetype
Astronomer produced 72-hour CEO resignation and 8-day Chief People Officer resignation. M&S produced no executive departures but substantial operational restructuring. Cracker Barrel produced design consultancy termination and subsequent leadership changes. AWS produced no executive departures. McDonald's produced no executive departures and Kempczinski's continued tenure.
Regulatory consequence varies substantially by archetype
AWS produced substantial regulatory consequence including DORA enforcement acceleration, the EU Cloud Sovereignty Framework procurement, and broader policy positioning. M&S produced regulatory consequence through UK National Crime Agency investigation, potential GDPR enforcement, and Parliamentary hearings. Astronomer, Cracker Barrel, and McDonald's produced essentially no regulatory consequence.
Competitor leverage varies substantially by archetype
McDonald's produced substantial competitor leverage for Burger King and Wendy's. Cracker Barrel produced sustained negative comparison cycles against other casual-dining brands. AWS produced sustained competitor positioning for European cloud providers. Astronomer and M&S produced minimal competitor leverage.
The Framework That Operates Across All Five
Despite the divergent patterns, a unified framework operates across all five cases. The framework has become standard reference in modern corporate crisis communications.
Phase 1: Detection and verification (Hour 0-2)
All five cases required immediate verification before public response. Cases that compressed verification operated within standard parameters. Cases that delayed verification while the cycle accelerated faced narrative establishment disadvantage.
Phase 2: Initial board and leadership coordination (Hour 2-8)
All five cases required substantial board-level engagement in the early hours. Companies with pre-established board protocols completed this phase substantially faster than companies improvising.
Phase 3: Initial public posture (Hour 8-24)
All five cases required initial public statement establishing corporate posture. The statements should be short, accurate, and preservative of optionality.
Phase 4: Investigation and corrective action (Day 1 to Day 30+)
All five cases required investigation and corrective action emerging from investigation rather than press cycle pressure.
Phase 5: Forward narrative establishment (Day 30 forward)
All five cases required forward narrative emphasizing operational continuity, product fundamentals, and broader category positioning. The narrative recognizes the incident without dwelling on it. Placement of the forward narrative coverage should follow the Citation Index ranking for the relevant category, since these are the publications the engines will use to construct the AI answer about the brand for years.
The Crisis Communications Infrastructure That Now Matters
The five cases collectively demonstrate what corporate crisis communications infrastructure must include in 2026.
Standing AI engine narrative monitoring — Profound, OtterlyAI, and the broader AI visibility tracking tier have become baseline infrastructure. Companies operating without continuous monitoring of ChatGPT, Claude, Gemini, and Perplexity narrative content cannot manage modern crisis cycles.
Pre-established deepfake response capacity — Reality Defender, Sensity, and the broader deepfake detection tier have become baseline infrastructure.
Pre-established personal security capacity — When named individuals become subjects of crisis cycles, the personal security dimension cannot be improvised.
Pre-established board protocols — Board investigation initiation, personnel-action authority, and crisis-specific governance must be pre-defined.
Pre-established multi-cloud architecture — AWS-type infrastructure dependency crises require business continuity planning that does not depend on single-provider availability.
Pre-established customer communications infrastructure — All five cases required sustained customer communications.
Pre-established crisis playbook with multiple archetype scenarios — Crisis playbooks must include scenarios across all five archetypes.
Pre-mapped Citation Share Index for the relevant category — Knowing which crisis communications firms the engines name first, and which trade publications they retrieve from, before the crisis. The Citation Share Index Series is the standing reference. Crisis Communications, Reputation Management, and the Trade Press Citation Index for Crisis are live.
The Sustained-Cycle Resource Model
All five cases operated sustained cycles exceeding any reasonable interpretation of "acute crisis response." The cumulative implication: the resource model for modern corporate crisis communications must support multi-month and multi-year cycles rather than acute moment alone.
Communications function staffing requires standing capacity to operate sustained cycles rather than activation-only crisis response. Legal counsel engagement must be sustained extending across cycle duration. Senior executive attention must be allocated as continuing responsibility rather than crisis-window concentration. Board governance requires continuing engagement across cycle duration. Stakeholder engagement must be sustained through the cycle rather than reverted to standard cadence after acute moment resolution.
The model represents substantial departure from pre-2020 crisis communications which typically operated 2-6 week intensive cycles followed by reversion to standard operations.
What 2026 and 2027 Will Likely Require
AI amplification will continue accelerating. Generative meme cycles, AI engine narrative establishment, AI-augmented competitor response, and AI-augmented harassment infrastructure will all continue scaling.
Multi-archetype coverage will become baseline expectation. Crisis playbooks limited to single-archetype scenarios — common in pre-2020 practice — cannot operate across the broader range of crisis categories.
Personal security infrastructure will expand. When named individuals face crisis cycles, the personal security dimension will continue requiring dedicated infrastructure.
Generative Engine Optimization will become pre-crisis discipline. The narrative that AI engines establish during crisis substantially reflects narrative infrastructure built before crisis.
Cross-jurisdictional communications complexity will increase. AWS-type cases demonstrate that infrastructure providers and broader multinational companies face increasingly complex regulatory environments.
The Companies That Will Operate This Best
Companies that will operate modern corporate crisis communications most effectively share recognizable infrastructure characteristics: standing crisis communications capacity rather than activation-only models; pre-established board protocols for investigation initiation and personnel-action authority; AI engine narrative monitoring as continuous operation; deepfake response vendor relationships pre-established; personal security capacity for named individuals; multi-cloud architecture or comparable infrastructure dependency mitigation; crisis playbooks with scenarios across all five archetypes; sustained-cycle resource models built into communications budget; Generative Engine Optimization as proactive discipline; pre-mapped trade-press Citation Share Index for the relevant category; customer communications infrastructure supporting sustained engagement.
The infrastructure costs are real. The cumulative implication of the five cases: companies that invest in the infrastructure substantially outperform companies that do not when crisis arrives.
Related EPR Coverage
