The first 48 hours after a content leak: what to do and what not to touch

A leak — subscription content reposted off-platform, private images shared without consent, a pre-release file circulating in a forum — does its worst damage early, and the response in the first two days shapes everything after. The goal in that window is twofold and in tension: remove the material fast, and preserve the evidence that makes lasting enforcement possible. Most self-help responses get the first half right and destroy the second.

Preserve before you confront

Capture everything before anyone knows you are acting: full-page captures of each infringing post with URL and timestamp visible, the account names and profile pages doing the posting, view or sale counts, and any messages related to the leak. If you suspect a specific person — an ex-partner, a former collaborator, a subscriber — preserve your communications with them, including the unpleasant ones. Deleting a conversation because it is painful can erase the strongest proof of where the leak began. Confronting the poster first usually accomplishes one thing: the evidence disappears and the material reappears under a new name.

Use every removal lane, not just copyright

If you created the material, DMCA notices to the hosts and § 512(d) notices to search engines are the fastest levers. But leaked private material often has stronger, parallel lanes: nearly every major platform bans non-consensual intimate imagery as a policy matter regardless of who owns the copyright; 15 U.S.C. § 6851 provides a federal civil claim for NCII with statutory damages; most states have their own statutes; and search engines run dedicated removal programs for NCII and doxxing that do not require a copyright claim at all. A serious response files in several lanes at once, because each reaches sites the others miss.

Don't pay, don't panic-post

If the leak comes with a demand — pay or it spreads — you are dealing with extortion, which is a crime worth reporting, and paying reliably produces a second demand rather than deletion. Equally, resist announcing the leak to your audience while enforcement is starting; public statements can amplify the search interest that spreads the material and can complicate later claims. Quiet, parallel, documented removal beats a public fight in nearly every case.

The pattern behind all of this: leaks are legal emergencies, but they are evidence problems first. Handled in the right order — preserve, then remove, then pursue — the same 48 hours that spread the material can also build the record that ends it.

This article is general information, not legal advice, and reading it does not create an attorney-client relationship with Westbridge & Cole LLP. For advice about your situation, request a consultation.