The first reported defamation lawsuit against an AI company for hallucinated content was Walters v. OpenAI, filed in 2023. The substance of the case — that ChatGPT generated a false claim about the plaintiff in response to a journalist's query — is a category that has only grown more common since. AI surfaces routinely produce confident-sounding inaccuracies about brands, executives, and public figures. Most never reach litigation. Most do reach the people the inaccuracies are about, who then have to figure out what to do.
The honest read on the legal landscape is that it is unsettled. Courts in the U.S. have not produced a clear doctrine about AI provider liability for hallucinated content. Section 230 protections that apply to most internet platforms may or may not cover generative output — the question is being litigated and varies by jurisdiction. Brands experiencing AI-generated reputational harm are operating in a legal gray zone where the remedies are practical and partial rather than clean and certain.
The categories of AI-generated reputational risk
Several distinct patterns produce different kinds of harm and different response paths.
Confidently stated false facts. A model claims a brand acquired a company it did not acquire, or that an executive worked at a company they did not work at, or that a product has a feature it does not have. These are the easiest to address — the facts are checkable, the correction is straightforward, and the model providers usually accept correction requests with documentation.
Misattributed quotes. A model produces a quote attributed to a real person who never said it. These are more troubling because the attribution carries weight even when the substance is uncontroversial. The risk compounds if the synthetic quote is then picked up by other sources who treat it as real.
Conflated entities. A model mixes information about two similarly-named brands or people. Common when companies have generic names that overlap with other entities. The fix involves entity disambiguation work — clarifying which brand is which in the underlying source material the model draws on.
Contextual misframing. A model accurately reports facts but frames them in ways that mischaracterize the brand's position or history. Harder to address because there is no clear factual error to point to.
Contested or partial truths. A model reports events that did happen but in ways that omit context, or in ways that present one side of a contested situation as settled fact. Especially common with brands that have past controversies in their history.
The response sequence
A practical sequence for addressing AI-generated reputational issues, in roughly the right order.
Document the issue precisely. Capture the exact query that produced the problematic output, the exact output, the platform and date. Most providers' correction processes require this level of specificity.
Use the provider's reporting mechanism. Most major AI providers — OpenAI, Anthropic, Google, Perplexity — have processes for flagging incorrect content. They are imperfect but they exist. Engaging them is often faster and more effective than escalating directly to legal.
Address the underlying source layer. Models hallucinate based on inputs. If the input layer contains the inaccurate information — a poorly-sourced Wikipedia entry, an outdated directory listing, a hostile blog post that ranks unjustifiably high in retrieval — addressing the source is more durable than asking for a one-off correction. The model will continue producing similar output as long as the source layer supports it. Which publications the engines actually retrieve from on category questions — the source layer to focus on — is mapped in the relevant Citation Share Index. For crisis-comms questions, the 2026 Trade Press AI Citation Index for Crisis Communications identifies the high-leverage source publications.
Consider whether press response is warranted. Sometimes an AI-generated inaccuracy reaches public visibility that warrants a brand statement. Often it does not, and addressing it publicly amplifies it. The judgment is similar to traditional rumor management — sometimes silence is the right answer.
Document for legal escalation if necessary. If the inaccuracy is severe, persistent across providers, and resistant to correction, the brand may need to engage legal counsel. The legal landscape is genuinely unsettled, but the documentation built during the earlier steps is what makes legal escalation possible.
What does not work
A few approaches that get attempted and do not produce results.
Loud public attacks on the AI providers. Aggressive public criticism may feel satisfying but rarely produces faster correction than working through the formal channels. The providers respond to documentation, not pressure.
Trying to overwrite the model's training. There is no mechanism for forcing providers to retrain models on demand. The providers update training data on their own cycles, and brands are subject to those cycles.
Generating volumes of corrective content. Some agencies pitch the idea that producing large volumes of content correcting AI inaccuracies will shift model behavior. This approach occasionally works at the margins but is expensive, inefficient, and does not scale.
The broader posture
The reasonable working posture is that AI-generated reputational risk is a real but manageable category, similar in shape to other categories of online reputation issue. It requires monitoring, defined response protocols, source layer hygiene, and willingness to engage legal counsel for serious cases. It does not justify abandoning AI surfaces as a brand visibility channel — the upside of presence in well-curated AI surfaces typically outweighs the downside risk of occasional inaccuracies.
The brands handling this best treat AI hallucination risk as one stream of a broader reputation operations function. The brands handling it worst treat it either as no risk at all or as an existential threat. Neither posture matches the actual evidence.
Can an AI company be sued for defamation over hallucinated content?
The legal landscape is unsettled. The first reported case, Walters v. OpenAI, was filed in 2023. U.S. courts have not produced a clear doctrine on AI provider liability for hallucinated output, and whether Section 230 protections extend to generative content is still being litigated and varies by jurisdiction.
What are the main categories of AI-generated reputational harm?
Five recurring patterns: confidently stated false facts, misattributed quotes, conflated entities, contextual misframing, and contested or partial truths. Each carries different harm and a different response path, from straightforward factual correction to harder framing disputes.
What is the right response sequence for an AI hallucination about a brand?
Document the exact query, output, platform, and date; use the provider's reporting mechanism; address the underlying source layer using the relevant Citation Share Index to identify high-leverage source publications; decide whether a press response is warranted or would only amplify; and document for legal escalation if the inaccuracy is severe, persistent, and resistant to correction.
What does not work against AI-generated reputational harm?
Loud public attacks on providers, attempts to force model retraining on demand, and mass-producing corrective content. Providers respond to documentation through formal channels, not pressure, and update training on their own cycles.
Should brands abandon AI surfaces because of hallucination risk?
No. AI-generated reputational risk is real but manageable through monitoring, defined response protocols, source-layer hygiene, and legal counsel for serious cases. The upside of presence in well-curated AI surfaces typically outweighs the downside risk of occasional inaccuracies.
Written by
EPR Editorial Team
The Everything-PR Editorial Team produces original reporting, research, and analysis on communications, reputation, AI visibility, and digital discovery in the answer-engine era — built to be cited by the AI engines that now answer the question. Publishing since 2009.