🏅
Exercise #035 · Mass Casualty Event · Pre-Planned Infrastructure · Multi-Agency Coordination · 4-Day Manhunt
Boston Marathon Bombing — Boston, Massachusetts
April 15, 2013 · 2 IEDs · Boylston Street finish line · 3 killed · 264 injured · Zero preventable deaths
Pre-Planned Infrastructure Mass Casualty Event Zero Preventable Deaths Multi-Agency Coordination Second Device Protocol 4-Day Manhunt 🏅 Anniversary
Key Facts
Date and time
April 15, 2013 — 2:49 PM EDT · Patriots' Day · 117th Boston Marathon
Devices
Two pressure-cooker IEDs — Device 1 at 671 Boylston St (2:49 PM), Device 2 at 755 Boylston St (2:49 PM, 12 seconds later)
Casualties
3 killed (Krystle Campbell, Lingzi Lu, Martin Richard) · 264 injured · 16 limb amputations
Pre-planned medical
30 red-tag patients transported in 18 minutes · all patients cleared from scene in 45 minutes · zero preventable deaths
WebEOC activation
Boston EMS activated WebEOC within 1 minute of first blast — coordinating 73 mutual aid ambulances committed within 6 minutes
Second device
Boston EMS Medical Director Dr. Richard Serino issued hold at 2:50 PM — 1 minute after first blast — pending second device sweep
JFK Library false alarm
2:56 PM — fire at JFK Library initially reported as a third device; managed as secondary incident without degrading primary response
MIT Officer Collier
April 18 — Officer Sean Collier shot and killed at MIT; dispatch coordinates active threat response across multiple Cambridge/Boston jurisdictions
Watertown firefight
April 19 — overnight firefight in Watertown; Suspect 1 (Tamerlan Tsarnaev) killed; Suspect 2 (Dzhokhar Tsarnaev) escapes
Resolution
April 19 — David Hennebury's 911 call reporting a body in his boat in Watertown resolves the manhunt; Dzhokhar Tsarnaev taken into custody
⏱ Incident and Manhunt Timeline
2:49 PM, Apr 15
First IED detonates at 671 Boylston Street near the marathon finish line. Twelve seconds later, the second IED detonates at 755 Boylston Street. The finish line area, crowded with runners and spectators, becomes a mass casualty scene. 264 people are injured; 3 are killed. WARNING
2:49–2:50 PM
Boston EMS activates WebEOC within 1 minute. The pre-planned mass casualty infrastructure activates immediately. Boston EMS had a Medical Director and teams staged at the marathon as part of the standard race medical plan. The existing medical infrastructure becomes the foundation of the MCI response. DISPATCH
2:50 PM
Second device hold issued. Boston EMS Medical Director Dr. Richard Serino issues a hold on patient movement — within one minute of the first blast — pending confirmation that no additional devices are present. This decision, made under pressure in the first 60 seconds, prevents medical personnel from moving into a potentially active threat zone. DISPATCH
2:49–3:07 PM
73 mutual aid ambulances committed within 6 minutes. The pre-established mutual aid network activates. Ambulances from surrounding communities respond to pre-designated staging areas. The patient distribution protocol — agreed to by Boston-area hospitals before the race — routes patients to multiple facilities to prevent any single hospital from being overwhelmed. DISPATCH
3:07 PM
All 30 red-tag patients transported within 18 minutes. The most critically injured patients — those triaged as immediate — are transported to trauma centers in under 18 minutes from the first blast. This metric, remarkable for a mass casualty event of this scale, is a direct result of the pre-planned infrastructure being in place and executing. DISPATCH
2:56 PM
JFK Library fire reported as possible third device. A fire at the JFK Presidential Library, approximately 3 miles from the finish line, is initially reported as a third explosion. Boston dispatch manages this as a secondary incident. Resources are not diverted from the primary MCI. The fire is later determined to be unrelated — a mechanical failure. The composure of the response to the false secondary is itself a training point. GAP
3:34 PM
All patients cleared from the scene. Within 45 minutes of the first blast, all patients have been transported from Boylston Street. The finish line area is cleared of casualties. The pre-planned patient distribution has prevented hospital surge at any single facility. No preventable deaths. DISPATCH
April 18, 10:30 PM
MIT Officer Sean Collier shot and killed. The Tsarnaev brothers ambush and kill MIT Police Officer Sean Collier at his patrol car on campus. Dispatch coordinates immediate active threat response across MIT, Cambridge PD, and Boston PD jurisdictions. The incident initiates the final phase of the manhunt. WARNING
April 19, 12:30 AM
Watertown firefight. The Tsarnaevs hijack a vehicle and are tracked to Watertown, where a firefight with Watertown PD and responding officers erupts. Tamerlan Tsarnaev is killed. Dzhokhar Tsarnaev escapes on foot into a residential neighborhood. A massive perimeter is established. Boston and surrounding jurisdictions go into shelter-in-place. WARNING
April 19, 6:00–7:00 PM
David Hennebury calls 911. After the shelter-in-place is lifted, Watertown resident David Hennebury goes to check on his boat in the backyard. He sees blood and a body under the tarp. His 911 call — precise, calm, specific — brings the manhunt to its resolution point. Dzhokhar Tsarnaev is taken into custody after a brief standoff. DISPATCH

The Boston Marathon bombing is the counter-case to Route 91. Same category of incident — a mass casualty event at a large, predictable, recurring public gathering. Radically different communications outcome. The difference was not luck, not technology, and not the severity of the event. It was that Boston had spent years building the infrastructure that made the response possible before the bombs went off.

The Boston Marathon runs every Patriots' Day through the heart of one of the most densely hospitalized cities in America. The Boston EMS marathon medical plan included staged medical teams, pre-designated treatment areas, a patient distribution protocol negotiated with every receiving hospital, and a WebEOC activation procedure that could be triggered within seconds. When the first IED detonated at 2:49 PM, the infrastructure was already in place. The plan didn't create a perfect response — it created a response that could absorb an imperfect situation.

"The rapid, coordinated response to the Marathon bombing — 30 red-tag patients transported in 18 minutes, zero preventable deaths — was not luck. It was the result of years of pre-incident planning executed by people who had rehearsed it." — Boston EMS After-Action Report, 2013

Within one minute of the first blast, Boston EMS Medical Director Dr. Richard Serino had issued a hold on patient movement pending second device confirmation. Within six minutes, 73 mutual aid ambulances had been committed. Within 18 minutes, all 30 red-tag patients had been transported. Within 45 minutes, the scene was cleared. Zero preventable deaths among 264 injured.

The JFK Library fire at 2:56 PM — initially reported as a third explosion — is its own training point. Boston dispatch managed it as a secondary incident without diverting resources from the primary MCI. The composure required to correctly triage a simultaneous secondary incident as separate from an active mass casualty scene is not improvised under pressure. It is practiced.

And then the manhunt. What followed over the next four days — the MIT shooting, the Watertown firefight, the shelter-in-place of an entire metropolitan area, the eventual resolution by a single civilian's 911 call — tested every layer of the Boston-area communications infrastructure. That it held is the other half of this story.

Discussion Questions — 4 Groups
🏗️ Pre-Planned Infrastructure — What Boston Built Before April 15
1
The Boston Marathon medical plan included staged medical teams, pre-designated treatment areas, a hospital patient distribution protocol, and WebEOC activation procedures rehearsed annually. When the bombs went off, the infrastructure activated — it wasn't built in response to the emergency. What specifically did Boston have in place that Route 91 didn't, and what does that infrastructure look like for a communications center?

The Boston Marathon's medical infrastructure had been refined over decades of running a world-class event through a major metropolitan area. It wasn't a document — it was a practiced system with assigned roles, tested protocols, and relationships built over years. The communications layer of that system is what this exercise focuses on.

  • WebEOC as the shared situational platform. WebEOC — Boston's emergency operations coordination tool — was activated within one minute of the first blast because there was a pre-established protocol for activating it, and the people who needed to activate it knew exactly what to do. The shared situational picture it provided was available to every participating agency within minutes. At Route 91, no equivalent shared platform existed for the event.
  • Pre-negotiated hospital patient distribution. Every receiving hospital in the Boston area had been included in pre-event planning. They knew the patient distribution protocol, they had pre-positioned surge capacity, and they had direct communication channels to EMS coordination. The result was that 30 red-tag patients were distributed across multiple facilities with no single hospital overwhelmed. This protocol was not improvised — it was executed.
  • Staged medical resources as first-response infrastructure. Boston EMS had teams, equipment, and a Medical Director staged at the marathon before the race started. When the blast occurred, medical care began within seconds — not minutes after dispatch — because the resources were already there. The dispatch role in the first minutes was coordination and mutual aid activation, not primary resource mobilization.
  • Mutual aid network pre-activated by protocol. 73 ambulances committed within 6 minutes. That number is only possible if the mutual aid network is pre-established, the staging areas are pre-designated, and the activation protocol is known to all participating agencies before the event. Dispatch activated a network that already existed — it didn't build one under fire.
  • Annual rehearsal is the mechanism that makes plans functional. A plan that exists on paper and has never been practiced is not an operational plan — it is a document. The Boston Marathon medical plan was rehearsed annually. Every participating dispatcher, medical coordinator, and hospital administrator knew their role because they had played it before. Rehearsal is the investment that converts planning into performance.
⏱️ The Second Device Hold — Decision Quality Under Maximum Pressure
2
Within one minute of the first blast, Boston EMS Medical Director Dr. Richard Serino issued a hold on patient movement pending second device confirmation. This decision — made in the first 60 seconds of a mass casualty scene, before the picture was fully clear — prevented medical personnel from moving into a potentially active threat zone. How should dispatch support a second device hold protocol, and what does good second device management look like from a communications perspective?

The second device hold at Boston is one of the most studied single decisions in American mass casualty response. It was the right call — there was a second device. It was made in under 60 seconds, under extraordinary pressure, with incomplete information. And it was made because Dr. Serino had a protocol for it and the authority to execute it.

  • Dispatch must be a participant in second device protocol, not just a recipient of it. When a second device hold is issued, dispatch has immediate responsibilities: broadcasting the hold to all responding units, halting the movement of additional resources into the scene perimeter, coordinating with law enforcement for device sweep, and maintaining communication with the Medical Director on hold status. These are not improvised — they are protocol steps that must be pre-assigned.
  • The hold creates a second communications challenge: managing the perimeter. When patient movement is halted, there are patients on the scene, medical personnel staged at the perimeter, and additional resources converging. Dispatch must manage that perimeter — preventing additional exposure while maintaining the resources needed for the moment the hold lifts. This requires active channel management, not passive monitoring.
  • The hold lifts on authority, not on assumption. At Boston, the hold was lifted when law enforcement confirmed that the immediate perimeter was clear. Dispatch should not assume a hold has lifted because time has passed or because field units resume movement. The lifting of a second device hold should be an explicit communication from the designated authority — and dispatch should confirm it before resuming normal patient movement.
  • Pre-incident briefing on second device protocol for all agencies. The second device hold only works if every agency responding to the scene understands it, respects it, and knows who has the authority to lift it. A fire crew that doesn't know the hold is in effect, moving patients toward the perimeter, creates exactly the exposure the hold was designed to prevent. Pre-incident briefing is how every responding agency enters the scene with the same protocol.
⏱️ The 60-second second device hold decision at Boston is a model of protocol execution under pressure. Dr. Serino had the protocol, the authority, and the presence of mind to execute it immediately. Dispatch supported it. The result was that medical personnel did not advance into an active threat zone.
🔥 The JFK Library False Alarm — Managing a Secondary Incident Without Degrading the Primary
3
At 2:56 PM — seven minutes after the first blast — a fire at the JFK Presidential Library was reported as a possible third explosion. Boston dispatch managed it as a secondary incident without diverting resources from the primary MCI. This required distinguishing an unconfirmed secondary incident from the active primary, maintaining resource allocation discipline, and communicating the status clearly to all stakeholders. What does this decision process look like from dispatch?

The JFK Library fire is the secondary incident management test that Boston passed quietly. In the chaos of an active mass casualty scene, a simultaneous report of a third explosion at a separate location is exactly the kind of information that can degrade a response — if dispatch allows it to. Boston didn't.

  • Secondary incident triage is a dispatch skill. When a report of a possible third device arrived at 2:56 PM, dispatch had to make an immediate assessment: is this confirmed, is it connected, does it require diversion of resources from the primary scene? The correct answer — treat as a secondary incident, dispatch a separate resource, maintain primary allocation — required both situational awareness and the discipline not to over-react to unconfirmed information.
  • Unconfirmed secondary incidents do not automatically escalate. The JFK Library fire was not confirmed as an explosion. It was reported as one. The distinction matters operationally: an unconfirmed report warrants investigation and a designated response, not a wholesale redirection of primary scene resources. Dispatch must hold that distinction clearly, communicate it clearly to incident command, and resist pressure to treat unconfirmed reports as confirmed facts.
  • Communication clarity prevents secondary degradation. If Incident Command at the finish line believed a third device had detonated at the JFK Library, their decision calculus changes — resource requests, perimeter management, patient movement. Dispatch's role is to communicate the accurate status: possible secondary incident under investigation, separate resources dispatched, primary scene resources not diverted. That clarity is a specific communications function, not incidental.
  • The false alarm as a training opportunity. The JFK Library fire turned out to be a mechanical failure unrelated to the bombing. That outcome isn't knowable in real time. The training lesson is not "it was fine because it wasn't real" — it's "the process was correct." Treat as secondary, investigate with dedicated resources, protect primary allocation, communicate status accurately. That process is correct regardless of what the investigation finds.
📞 David Hennebury's 911 Call — The Civilian as the Final Link
4
The four-day Boston Marathon manhunt ended when Watertown resident David Hennebury called 911 after finding a body under the tarp of his backyard boat. His call — precise, calm, and specific — brought 20,000 law enforcement personnel to a single address within minutes. What does the Hennebury call teach about how dispatch handles the civilian caller who provides the critical piece of information in a high-profile, high-stakes investigation?

The Hennebury call is the end of a four-day communications story that began at Boylston Street. For four days, the Boston-area communications infrastructure had been managing an event of unprecedented scale — a mass casualty scene, a citywide manhunt, the killing of an MIT police officer, a firefight in a residential neighborhood, and a metropolitan shelter-in-place. The resolution came from a single civilian noticing something wrong and calling 911.

  • The high-stakes civilian caller requires a specific handling approach. David Hennebury was calling about the most wanted person in America, from a backyard in a city that had just emerged from shelter-in-place after four days of crisis. The dispatcher receiving that call had to simultaneously: assess the caller's safety, confirm the location, understand what he was describing, and immediately escalate without alarming the caller or causing him to take action that could be dangerous. That is a high-skill call under extraordinary circumstances.
  • Precision at the point of resolution matters enormously. The address, the access point, the exact location of the boat in the yard — these details, extracted accurately from Hennebury in the first minutes of the call, are what allowed 20,000 law enforcement personnel to converge on a specific point rather than a general neighborhood. Dispatch accuracy at the resolution point of a manhunt is as operationally significant as dispatch accuracy at the initiation.
  • Caller safety management in an active threat context. Hennebury had already seen blood and a body under the tarp. He was in proximity to a wounded, dangerous suspect. Dispatch managing his safety — keeping him calm, moving him away from the boat, keeping him on the line without creating urgency that might cause him to act — was a direct life-safety function. The handling of his location and movement in the first minutes of that call required active, deliberate management.
  • The civilian caller as a sensor network. Over four days, thousands of Boston-area residents were the eyes and ears of the investigation. Tips, observations, and reports flowed through 911 and other channels continuously. Hennebury's call was the decisive one — but it came after thousands of others that had been triaged, assessed, and followed up. The communications infrastructure that handled four days of sustained high-volume investigative support is itself a training subject.
📞 The Boston Marathon case closed with a 911 call from a private citizen in a backyard in Watertown. The communications system that started with WebEOC activation within 60 seconds of the first blast ended with a dispatcher handling a caller who had found the suspect. Both ends of that story required professional-grade call handling.

Your Notes

Record your dispatcher name, center, and any notes from today's discussion. Your entries are saved locally and print with the exercise.
Saved

Answer all five questions, then tap Submit to see your score and feedback. Five bonus questions unlock after completing the base quiz.

Question 1 of 10
Boston transported 30 red-tag patients in 18 minutes with zero preventable deaths. Route 91, four years later, had CAD failures, no pre-assigned dispatcher, and no pre-planned channel architecture. What is the single most important variable that explains the difference in communications outcomes?
Question 2 of 10
Dr. Richard Serino issued the second device hold within one minute of the first blast, before the full picture was clear. What made that decision executable in 60 seconds?
Question 3 of 10
At 2:56 PM, the JFK Library fire was reported as a possible third explosion. Boston dispatch managed it as a secondary incident without diverting resources from the primary MCI. What dispatch discipline does this require?
Question 4 of 10
73 mutual aid ambulances were committed within 6 minutes of the first blast. What pre-incident condition makes a 6-minute mutual aid commitment possible?
Question 5 of 10
David Hennebury's 911 call resolved the four-day manhunt. What specific dispatcher skill was most critical in handling his call?
+5 bonus questions unlock after submitting
Boston EMS and MEMA after-action reports are the primary sources for response metrics. FEMA's lessons learned analysis, Boston Globe timeline documentation, the Annals of Surgery medical response study, and PBS Frontline's documentary provide comprehensive coverage of all four days.
🔗
This exercise is Part 2 of the special events series — compare with Exercise #034 — Route 91 Harvest Festival, the same category of incident four years later where the pre-planned infrastructure was absent. Return to the full exercise hub.