Crisis Apology Speed: Median 2 Days, 4 of 23 Took 30+ Days

Among 30 well-known corporate crises from 2010 to 2024, the median first apology came two days after the public trigger. In 23 of the 30 cases 5W Research found apology wording, and 14 of those came within two days. Four took 30 days or more: BP, Change Healthcare, Abbott and Boeing, whose apology for the Lion Air crash came 157 days after it. Seven cases had no apology wording in the retrieved sources.

By Ronn Torossian, Founder and Chairman of 5W. Edition 1 (provisional). Last updated: October 26, 2026. 5W Research, directed by Ronn Torossian.

Contents

• How fast is the first statement?
• How long does a first apology take?
• What do first apologies cover?
• Does a defensive opening delay the apology?
• Awareness to disclosure gaps
• Limits of the study
• 5W recommendations
• Frequently asked questions
• How the study was done
• Full 30-case dataset
• Who directed the study

Summary

• The median first apology came 2 days after the public trigger. Fourteen of 23 apologies came within two days, and four took 30 days or more: BP (40), Change Healthcare (70), Abbott (88) and Boeing after Lion Air (157).
• A first company statement came on the same calendar day in 18 of 28 measurable cases and within two days in 26. Anheuser-Busch was slowest at 13 days.
• In 9 of 23 cases, the first apology addressed inconvenience, concern, disruption, trust or a shortage rather than the injury or loss.
• Only 9 of 30 first statements acknowledged the problem plainly. Defensive openings did not delay the apology in this sample (median 1.5 days against 1 day).
• Where companies knew first, the gap before telling the public ranged from under a day to 40 days (Equifax).
• Four cases are fully verified and 26 are mostly verified, so Edition 1 is provisional.

How fast do companies make a first statement?

Companies issued a first statement on the same calendar day as the public trigger in 18 of 28 measurable cases, and within two days in 26.

Six of the same-day cases were self-disclosures where the company announcement was the first public notice (Toyota, Equifax, Optus, SVB, Clorox and Abbott), so a zero lag is built in. Among the 22 cases where the public learned first or at the same moment, 12 had a same-day statement, 18 came within a day and 20 within two days.

The slowest first statements came from FTX, whose affiliate Alameda Research responded on X four days after the CoinDesk report, and from Anheuser-Busch, whose CEO issued the company first statement on the Bud Light backlash 13 days after the influencer video.

How long does a first apology take?

The median first apology came two days after the public trigger, across the 23 cases where apology wording was found in retrieved sources.

Five companies apologized the same day, 14 within two days and four took 30 days or more. The first apology wording found for Change Healthcare came in the CEO's Senate testimony on May 1, 2024, 70 days after the February 21 attack. Boeing's April 2019 apology release came 157 days after the Lion Air crash and 25 days after the Ethiopian Airlines crash.

Seven cases had no apology wording in the retrieved sources: Uber, SVB, Bud Light, Target (Pride collection), MGM, Boeing (door plug) and Clorox. That does not prove they never apologized. MGM's first statements were a systems notice and an 8-K, and Boeing's CEO acknowledged a mistake on January 9, 2024.

What do first apologies actually apologize for?

In 9 of 23 cases, the first apology addressed inconvenience, concern, disruption, trust or a shortage rather than the injury or loss itself.

Situational Crisis Communication Theory (SCCT) is a framework that matches crisis response strategies to how responsible an organization appears. As summarized in a 2022 peer-reviewed study in Frontiers in Psychology, SCCT describes a full apology as one that expresses regret, shows concern and accepts responsibility for the crisis. The nine apologies below show concern, but in the wording found they stop short of the harm.

The pattern matters because the word sorry in a first statement can read as an apology while the sentence around it still avoids the injury. Equifax, Target and Sony each apologized within two days, but for inconvenience or concern.

Does a defensive first statement delay the apology?

In this sample a defensive or reassuring first statement did not delay the apology: the median was 1.5 days for the eight apologizing cases that opened by defending, deflecting, reassuring or declining to confirm, against 1 day for the eight that opened by acknowledging the problem.

Pepsi defended its ad in a statement and, hours later on April 5, 2017, apologized and pulled it, according to a Fortune report. Facebook's CEO said he was really sorry on CNN hours after a post that left the word out, according to a Business Today report.

The long waits sit elsewhere. Three of the four apologies that took 30 days or more followed a sympathy-only opening (BP and Boeing after Lion Air) or a facts-only opening (Change Healthcare), and Abbott's first statement was not coded. The study cannot say why, because deaths, regulator action and litigation vary across these cases.

How long do companies sit on a problem before disclosing it?

Where both dates are documented, the gap between a company learning of a problem and telling the public ranged from under a day to 40 days, with a median of 5.5 days across six cases.

Equifax discovered its breach on July 29, 2017 and announced it on September 7, according to its own 8-K release. Sony detected an intrusion on April 19, 2011 and disclosed the data theft on April 26, while Target confirmed its breach on December 15, 2013 and announced it four days later.

Two longer gaps have no exact day count. Abbott received infant illness complaints from September 2021 and recalled formula on February 17, 2022, according to a Senate HELP Committee letter. Facebook said it learned in 2015 that a researcher passed user data to a data analysis firm, and it announced a suspension in March 2018, according to its own post as reported by IANS.

What are the limits of this study?

The study measures calendar days for 30 hand-picked cases, so it describes those cases and cannot estimate how fast companies apologize in general.

• The sample is purposive: well-known crises from 2010 to 2024, not a random draw.
• Lags are calendar days, because many timestamps are not public. Hours are unpinned for several cases.
• Twenty-six of 30 cases are mostly verified: independent reports confirm the dates, but at least one element is missing, such as a primary company page, an exact hour or a check for earlier statements. The appendix names each gap.
• First apology means the first apology wording found. An earlier statement may exist that was not retrieved.
• The seven cases with no apology found may have apologized in sources not retrieved.
• No independent second coder has checked the stance and apology coding.

What does 5W recommend? (Recommendations, not findings)

These five recommendations are 5W's views, and the study does not test whether they improve outcomes.

1. Put the apology and the harm in the same sentence. Nine of 23 first apologies named inconvenience or concern instead of the injury, loss or data exposed.
2. Issue a first statement within a day even when facts are incomplete. In 18 of 22 reactive cases the first statement came within a day, and the slowest took 4 and 13 days.
3. When the company knew first, state the date it learned and why disclosure waited. Equifax's CEO conceded in a USA Today op-ed that it was fair to question the six-week wait, according to a PYMNTS report.
4. Decide whether the company will apologize before the first statement goes out. Three of the four slowest apologies followed a sympathy-only or facts-only opening.
5. Keep a timestamped log of every statement. Many cases here could be measured only in calendar days because hours were never published.

5W describes its approach to these situations on its crisis communications practice page.

Frequently asked questions

How fast do companies apologize in a crisis?

The median first apology in this 30-case study came two days after the public trigger. Fourteen of 23 apologies arrived within two days, and four took 30 days or more.

Which companies waited longest to apologize?

Boeing waited 157 days after the Lion Air crash, Abbott 88 days after its formula recall, Change Healthcare 70 days after its ransomware attack and BP 40 days after the Deepwater Horizon explosion.

Does the word sorry in the first statement matter?

The study does not measure effects on reputation. It shows that in 9 of 23 cases the first apology covered inconvenience or concern, not the injury, and SCCT research describes a full apology as one that also accepts responsibility.

Are these numbers a national estimate?

No. The 30 cases are well-known crises chosen before collection, and the figures describe only those cases.

What counts as an apology in this study?

An apology counts when the words apologize, sorry or regret appear in a company or executive statement. Sympathy wording such as deeply saddened does not count.

Why are most cases marked mostly verified?

Independent reports confirm the dates, but each of the 26 cases lacks at least one element, such as a primary company page, an exact hour or a check for earlier statements. The appendix lists each open gap.

How was the study done?

The study reviewed 30 corporate crises chosen before data collection, covering product, data, backlash and operational events from 2010 to 2024, with eight backup cases held in reserve. No case was swapped, because a swap is allowed only when sources are missing.

Each case records the public trigger, any earlier company awareness, the first company statement, the first top-executive statement found and the first apology wording. A key timestamp counts as verified only with a primary source plus independent confirmation. Lags are calendar days from the public trigger, and the same date is zero.

Ronn Torossian, Founder and Chairman of 5W, directed the research, which used AI-assisted web retrieval and coding. No surveys, paid datasets or interviews were used. Related 5W studies include the press release syndication study and the AI in PR degrees audit, and more are on the 5W research page.

Where is the full 30-case dataset?

The dataset below lists all 30 cases with trigger, first statement, first apology, stance, verification status and a key source. Calendar days are counted from the public trigger, and a blank means no value was found.

Items awaiting verification

• For the 26 mostly verified cases, a primary company page, an exact hour or a check for earlier statements.
• First top-executive statements for Sony, Pepsi, H&M, MGM, Boeing (Lion Air) and Clorox, and whether MGM's CEO apologized later (trade press suggests so; not retrieved).
• The Abbott February 17 release text and any earlier CEO statement.
• The Wells Fargo September 8 statement text and the Southwest trigger date.
• An independent second check of the stance and apology coding.

Who directed this study?

Ronn Torossian is the Founder and Chairman of 5W, a public relations, creative and GEO agency, and the author of the book For Immediate Release. He is the author of this study, which 5W Research published as Edition 1 on October 26, 2026.