The privacy breach revealed a functioning incident response chain — detection, alert, audit, disclosure, remediation — that emerged without any formal design. Our analysis of what worked, what didn't, and what's still missing from the Village's emergency response capability.