The image that took down a website, and what it revealed about brand risk
It wasn’t a cyberattack. It wasn’t a compromised password. It was a licensed stock image with an expired licence, and it brought an entire client website offline. Here’s what that moment taught us about brand protection in a world where creative decisions carry operational consequences.
Early last month, one of our clients’ websites went down. Not slow. Not glitchy. Completely offline, and without warning. We immediately looped in the development team, bracing for a breach or a backend vulnerability. What we found instead stopped us cold.
The original site provider had used a short-term licensed stock image. The licence had expired. Once it lapsed, the provider flagged the content, access was restricted, and the site went dark.
Business disrupted. Credibility questioned. All because of a JPEG.
“When something as small as an image can take a website offline, creative decisions are no longer just creative. They are operational. They are reputational.”
Licensed content is more than a legal formality
As marketers and designers, we work with images every day. It is easy to treat licensed content as a procurement detail, a box to check before moving on to the real work. But this incident made something clear: a licence is not just a legal instrument. It is a live dependency embedded in your digital infrastructure.
Using licensed work responsibly is not only about avoiding legal exposure. It is about respecting creators, honouring intellectual property, and protecting the integrity of the brands entrusted to us. When we treat those decisions carelessly, or pass them downstream without oversight, the risk does not disappear. It simply waits.
A new entry in the security checklist
Most teams do not think of stock images as part of their security or risk framework. We did not either, at least not in this way. After this incident, we added licence verification and expiration tracking to our internal website audit checklist. It is a small procedural change, but it reflects a meaningful shift in how we define brand risk.
Practical steps worth taking
- Audit licensed assets on any website that has changed hands or providers over the years
- Document licence types, sources, and expiration dates in a central log
- Include licence renewal reviews in your regular maintenance schedule
- Prefer perpetual or extended licences for assets used in long-lived digital properties
- Establish a handover checklist that includes asset provenance whenever a site changes agency or developer
Brand protection goes all the way down
Protecting a brand today goes well beyond messaging and storytelling. It requires integrity at every level of execution, including the pixels. If your website has passed through multiple hands over the years, it may be worth asking a simple question: do you actually know the origin and status of every licensed asset it contains?
The smallest oversights can create the greatest vulnerabilities. And brand protection, as we were reminded, is bigger and more operational than most of us once understood.
Questions about your brand’s digital risk exposure? We’re happy to talk.
