A press kit is the most under-protected asset a company owns: product renders, founder headshots, logo suites, boilerplate, funding numbers, roadmap slides drafted for "background use." Journalists need it in one click. So companies publish it. And a small ecosystem of brokers has learned that a well-built press kit is a finished product — one that can be copied, resold, republished, and used to dress up operations the asset's owner would never endorse.
What exactly gets stolen
The inventory comes straight off your newsroom page:
- Visual identity. Logos, product renders, lifestyle photography commissioned at $15,000–$80,000 a shoot.
- Credibility markers. "As featured in" bars, award badges, funder logos, analyst quotes.
- Narrative assets. Boilerplate, founder bios, milestone timelines — everything needed to impersonate your story without writing it.
Copyright attaches to all of it the moment it is created. The theft is straightforward infringement; the schemes built on the theft are where it gets interesting. scam coverage.
Scheme one: the asset-dressed clone
Cloned-brand operations — from fake storefronts to lookalike "newsrooms" — need one thing above all to clear a buyer's first glance: authentic-looking assets. A scraped press kit supplies them. Investigators of counterfeit storefront operations have documented the workflow: scrape the brand's own media page, deploy its renders on a copycat property, and let the victim's own photography vouch for the impostor. The company then spends real money proving that its own press photos were stolen — a takedown campaign across marketplaces, registrars, and search engines, often running five figures in legal and agency time.
Scheme two: the press-kit broker
Between scraper and end user sits a resale layer. Brokers compile "brand kits" — competitor assets, boilerplate, founder contact details harvested from media pages — and sell them as research or outreach packages. The buyers are not all malicious: some are cold-mailers who want to "personalize" pitches; some are link sellers who want trustworthy-looking anchors; some are copycats who want the narrative structure without the lawyer. Reselling copyrighted assets and harvested contact data is unlawful in itself, and the broker layer exists mainly to give the end buyer deniability.
Scheme three: the kit as bait
The inverse operation targets the company. "We noticed your press kit is missing critical assets — journalists bounce without EPS logos and timed captions. Our audit tool found 23 issues." The free scan finds a invented problem; the fix is a $4,800 "media readiness package" of files the company already owns. Variants bundle the upsell with a fake "distribution guarantee" — connecting straight back to the placement-scam economy.
The legal floor
Copyright law needs no registration for the owner's core rights, though registration is a prerequisite for statutory damages in US federal court — a practical reason to register flagship assets. Misuse of a company's identity adds trademark claims. And where stolen kits dress up fraud operations, the underlying deception escalates the exposure for the users, not the victim. The Digital Millennium Copyright Act's takedown process (17 U.S.C. § 512) is the workhorse response: notices to hosts, registrars, marketplaces, and search engines, executed in a repeatable cycle.
Related stories: Letters From a Newsroom That Doesn't Exist: The Spoofed-Media Phishing Economy · The Fake Journalist Playbook: Interview Bait, Paywalled 'Features,' and Stolen Bylines.
What enforcement actually looks like, end to end
A typical resolution, assembled from the standard playbook: a company's hero product render surfaces on a copycat storefront. Week one: dated screenshots, WHOIS snapshot, archive capture — evidence before contact. Week two: DMCA notice to the host; the storefront moves, which itself is evidence of knowledge. Week three: notice to the registrar, citing the host's non-response; simultaneously, marketplace takedowns where the clone sold, and a search-engine deindexing request for the specific URLs. Week four to six: the clone folds or moves offshore and goes dark for want of payment processing. Total direct cost: staff time and, if counsel is engaged, low five figures — against the five to six figures the campaign would eventually cost if the clone matured. The companies that lose in this sequence are the ones that start with a threat letter and no evidence file, then discover the operator moved everything during the weeks the evidence was being assembled. Order of operations is most of the law here: capture, then notify, then escalate. Every step skipped costs a step later at ten times the price.
The cost of not enforcing, priced
Companies that decline enforcement usually price only the legal fee and ignore the compounding costs on the other side. A clone storefront live for six months captures signups, payment details, and brand queries that convert into chargebacks, support load, and — in the worst documented cases — regulator attention when defrauded consumers file complaints against the real brand. Search results contaminate too: copycat pages rank for your own product terms, splitting traffic and feeding attribution confusion that marketing teams spend quarters diagnosing. Set against the takedown playbook's actual cost — mostly staff hours in week one, escalating only if resisted — non-enforcement is the expensive option in most scenarios. The exception is equally real: pursuing every scraper with counsel is a budget pit. The disciplined version is triage — enforce against anything that transacts, monitors, or impersonates; archive-and-ignore the rest. Triage keeps the legal budget pointed at the operations that hurt, which is the only version of this fight that is affordable and winnable at once.
How to protect yourself
- Register the crown jewels. Flagship photography, renders, and brand marks registered with the US Copyright Office before you need them — statutory damages change negotiation physics.
- Embed provenance. Metadata and invisible watermarking in press assets make theft provable and takedowns faster.
- Version your kit. Unique minor variations per major channel (site, wire, partner shares) reveal which channel leaked when assets surface elsewhere.
- Monitor. Periodic reverse-image searches of your hero assets; alerts on your brand name in new domain registrations.
- Run the takedown ladder. Host first, then registrar, then marketplace/platform, then search deindexing. Most copycat operations fold at step two.
- Refuse paid "audits" of your own media page. Everything a legitimate audit checks, a template checklist covers. Fee-gated findings are a sales artifact.
- Log everything. Screenshots with dates, WHOIS snapshots, archive.org captures. Infringement claims live and die on dated evidence.
A press kit is an invitation — that is its job. But the invitation should name the house. Ownership of your story's raw materials is not automatic; it is maintained, registered, and enforced.
For more context, read Letters From a Newsroom That Doesn't Exist: The Spoofed-Media Phishing Economy.
For more context, read ai generated press coverage.
For more context, read pay to play podcast.