Gotham Office of Emergency Management - Field Advisory - Category 1 Seismic Event - Restricted Circulation
Saturday Special · #007
Containment Breach
Arkham After the Shake
Gotham City - When the worst of the worst walk out the front door at once
Series: I Don't Think It's An Emergency, But...
Classification: Fictional Scenario
Exercise No: SS-007-ARKHAM
Facility Advisory - Mass Containment Failure
A 6.8 magnitude earthquake strikes the Gotham region at 03:47 local. Within 12 minutes, Gotham Central Dispatch is fielding calls from all directions - structural collapse, medical, fire, power out citywide. Somewhere in the first hour, a call comes in from a civilian on a cliff road outside the city: "I'm looking at Arkham. The walls are down. People are walking out." Your center has seen mass casualty. Your center has seen disaster. Your center has not seen this.
187
escaped
Unaccounted
The Shake 03:47 - T+0

A 6.8 magnitude earthquake strikes beneath the Gotham River. Epicenter shallow, duration 42 seconds. The initial CAD surge is what you'd expect from any major quake: collapsed structures in the Narrows, fires from gas line ruptures in Burnside, the elevated rail off its tracks near Robinson Park, a bridge buckled at Trigate. Calls flood in at a rate your queue cannot absorb. Every seat is already filled and you are already losing calls to abandoned status.

Power goes out in roughly 60% of the grid within three minutes. Cell towers start failing ten minutes later as backup batteries on the network start dropping one by one. Your center is on generator. The radio is holding. The phones are holding. The people on the phones are the ones you're worried about.

The Call 04:51 - T+1:04

Call-taker 7 gets a 911 from a motorist on the cliff road east of the city. The caller is out of her car, looking across at the Arkham peninsula. She says, very calmly, "The asylum's east wall is down. The whole east wall. I'm watching people climb out over the rubble. A lot of people." She pauses. "One of them is on fire. He's on fire and he's laughing."

Call-taker 7 is 34 years old, has been on the floor for 11 years, and has never heard a sentence like the one she just heard. She codes the burn victim as 7-D-2 (F) - BURNS, fire present, caller is third-party and not at the patient's side - flags the broader scene for supervisor review, and moves to the next call in queue. The supervisor is on a stacked triage decision about whether to keep diverting units to the Narrows or release a strike team for a confirmed trapped-family call in Park Row.

The Arkham flag sits in the queue for nine minutes before anyone reads it.

The Pattern Forms 05:02 - T+1:15

Three more calls reference Arkham-adjacent activity. A truck driver at the west approach reports "a bunch of guys in orange jumpsuits walking down the highway." A night-shift nurse at Gotham Mercy calls in a hit-and-run by a vehicle she describes as "a clown van, not kidding, a clown van." A resident of the Bowery calls to report a man with "tattoos on his whole face and a green beard" just walked past her window and waved.

Your supervisor looks up from the Narrows triage board. She walks to the call-taker 7 console, reads the 04:51 entry, and says the word you don't want to hear her say out loud on a morning like this, which is "oh."

She picks up the direct line to Arkham's front gate. It rings. It rings. It rings. She picks up the line to Gotham Central Booking. She asks the desk sergeant to confirm that Arkham has reported in since the quake. The desk sergeant has not heard from Arkham. The desk sergeant has been busy with Blackgate, which is also having a bad morning, though not as bad.

The Classification Problem 05:30 - T+1:43

Your center now has a working theory and no confirmed information. Arkham Asylum may have experienced a catastrophic containment failure. The facility holds approximately 412 inmates at last known count, including a population classified as "extraordinary threat" - a designation your CAD recognizes but has never had to actively work around. There is no nature code for "mass escape of subjects previously classified as extraordinary threat." There is no nature code for most of the subjects.

The watch commander calls in from home. He is on the bridge. The bridge is closed. The bridge is closed because the bridge is no longer structurally sound. He will not be at the center in time to make the next set of decisions. He authorizes the supervisor to act in his stead. She acknowledges and hangs up.

Your supervisor now has the following simultaneous problems: active mass casualty, active fire, active infrastructure collapse, a partial comms network, units pulled across four precincts, the possibility that several dozen individuals who should be in maximum-security psychiatric confinement are not, and no way to verify any of it without sending people she cannot spare to a facility she cannot raise.

She does what dispatchers have always done in moments like this. She writes it down, she makes a list, and she starts working the list.

CAD Event Log - First Four Hours
03:47:12
SYS - Seismic alert auto-populates CAD. Magnitude 6.8, epicenter Gotham River, duration 42s. All stations advised. Call volume projection: catastrophic.
03:48:30
DISP-2 - Abandoned call surge begins. Queue hits 47 calls within 90s. Four call-takers on floor. Eight more en route per recall.
03:56:04
DISP-4 - Narrows multi-structure collapse. Minimum six buildings. USAR mutual aid requested. Coded STRUCT COLLAPSE / MCI
04:12:41
DISP-7 - Cell network degradation detected. 35% of 911 calls now routing as wireless non-geographic. ALI reliability compromised.
04:51:16
DISP-7 - Caller on cliff road east of city. States Arkham Asylum east wall has failed. Subjects exiting facility. One subject reported "on fire and laughing." Burn victim coded 7-D-2 (F). Broader scene flagged for SUPV review.
05:02:55
DISP-3 - Truck driver reports "men in orange jumpsuits walking down westbound highway, west approach." Caller counted at least 20. SUSPICIOUS / MULTI
05:04:18
DISP-6 - Gotham Mercy nurse reports hit-and-run by "clown van." Vehicle description is not a joke. Coded HIT AND RUN
05:11:02
SUPV - Supervisor reviews 04:51 flag. Calls Arkham direct line. No answer across three attempts. Contacts Central Booking. Booking confirms no contact with Arkham since quake.
05:18:44
SUPV - Watch commander briefed by phone. WC confirms bridge impassable. Delegates command authority to on-duty supervisor. Mutual aid activation authorized.
05:27:09
SUPV - Statewide BOLO drafted. Requires inmate roster from Arkham records. No one at Arkham is answering the phone. BOLO issued with "unknown number, approximately 100+ escaped subjects, specific identities pending" language.
06:03:28
GCPD-AIR - Helicopter overflight of Arkham peninsula. Reports east wall failed, south guard tower collapsed, fires in three buildings. Estimates visible inmate population on grounds: under 40 of expected 400+. The rest are somewhere else.
06:47:55
DISP-5 - First of many calls reporting sightings. ONGOING / MULTI - Call-takers advised to document, not attempt to identify.
07:33:02
SUPV - Four hours post-event. Confirmed escape number from surviving Arkham administrator (reached by runner): estimated 187 inmates unaccounted for out of 412 total population. Reconciliation ongoing. Many of the missing cannot be distinguished from the dead in the rubble until recovery is complete.
Real-World Parallels - This Has Actually Happened
Haiti National Penitentiary - January 12, 2010
A 7.0 magnitude earthquake struck Port-au-Prince at 4:53 p.m. The National Penitentiary held roughly 4,215 inmates in a facility designed for 500. By 5:00 p.m. that same day, every single prisoner at the National Penitentiary was gone - dead or escaped. Across Haiti's 17 prisons, an estimated 4,800 of 8,535 inmates were dead or missing within hours. Inmates burned the prison records on the way out. Recapture operations continued for months; many were never found. Human rights organizations later noted that 60 to 80 percent of those held at the facility had never been convicted of a crime.
Orleans Parish Prison - August 29, 2005
Hurricane Katrina made landfall and the sheriff's office decision was to leave roughly 650 inmates inside rather than evacuate. When the floodwaters came, staff abandoned Templeman III, which held more than 600 inmates. Some were trapped in ground-floor cells in chest-high water for days. The evacuation that eventually followed moved people to highway overpasses. Human Rights Watch reported 517 inmates unaccounted for after the evacuation lists were reconciled. The lesson that emerged: if your facility's emergency plan is "the prisoners stay where they belong," you don't actually have an emergency plan.
Croix-des-Bouquets Civil Prison, Haiti - February 25, 2021
Not a natural disaster, but a useful comparison. A mass escape during what began as a mutiny resulted in 400+ inmates fleeing, 25 dead including the prison director, and a regional BOLO that strained national police capacity for weeks. The facility held 1,542 inmates at nearly twice its design capacity. Mass escapes compound; overcrowded facilities with thin staff ratios have cascading failure modes that a single-point-of-failure event can trigger.
The Arkham Parallel
Every mass escape from an institutional facility in the real world has produced the same first-four-hours pattern that this exercise describes. Communications with the facility collapse before the facility itself is fully known to have collapsed. Initial escape counts are wrong. Initial threat categorization is wrong. The BOLO goes out with approximate numbers because accurate numbers won't exist for days. And the comm center is doing this while fielding everything else the precipitating disaster generated. Arkham is imaginary. Everything else in this paragraph is not.
Discussion Points - Operational Response

The code is right for the patient. Protocol 7 is Burns, DELTA-level 2 indicates severe burns with priority symptoms, and the F suffix flags that fire is present on scene - which is exactly the information fire and EMS need before arrival. That's a correctly-selected chief complaint under MPDS. What gets lost is the signal value of where the caller is and what else she's watching. A 911 call reporting a mass exit from a correctional or psychiatric facility is a discrete scene type that deserves a discrete police code running in parallel with the medical - not a single entry that captures only the burn victim. Many centers don't have a mass-escape police code on the tile. This is the kind of gap an exercise like this is supposed to surface.

The harder question is the nine-minute delay before a supervisor read the flag. That is not the call-taker's failure - that is a queue-depth and flag-priority failure during a mass-event surge. If your center's supervisor review queue is first-in-first-out during a catastrophe, your most important flags are sitting behind unrelated routine calls. The fix is a priority flag tier that jumps the queue and pages the supervisor directly.

The call-taker did her job. The system she was working inside of did not do its job. That distinction matters when the after-action comes.

One: the state department of corrections duty officer or equivalent. That call is trying to establish whether corrections has its own intel on the facility status - a radio check, a transport crew in the area, a post-event roll call protocol - and to force them to take the problem on as their own rather than assume it's a local police problem. A state-level corrections agency has authority and resources a municipal comm center does not.

Two: the neighboring jurisdiction's 911 center and/or the regional fusion center. The escaped population is going to spill across jurisdictional lines within hours, and the BOLO needs to be regional on day one, not regional after day three. The fusion center can push to state and federal partners faster than your CAD can.

Three: an assigned liaison officer or SWAT commander who can send a team to physically go to the facility. Your comm center cannot confirm what's happening at Arkham from a distance. Someone has to lay eyes on it. Helicopter overflight is the fastest ground truth available, and requesting it early is critical. If the helicopter is the only comms with the facility for the next six hours, that's a helicopter you want airborne as soon as possible.

"Who do I call?" is the question every dispatcher answers fifty times a shift. The answer in a mass-escape scenario is not in any protocol binder written before the day it happens. Make the binder now.

Lead with what is known and explicitly flag what is not. "Approximately 100+ subjects have escaped Arkham Asylum following catastrophic containment failure. Specific identities, medical classifications, and threat levels are not yet confirmed. Treat all persons in institutional clothing (orange jumpsuit, facility-issued scrubs) in the vicinity of the Arkham peninsula as potential escapees pending identification." Then follow with the categorical guidance: do not approach alone, call for backup before engagement, document location and direction of travel, request immediate dispatch of supervisor to scene.

What you do not do is guess at identities. A BOLO that names a specific individual based on a witness description that was ambiguous is worse than a BOLO that names nobody. It creates false positives that waste units and potentially injure citizens who resemble the named individual. The Haiti parallel is instructive - Haitian authorities spent years reconciling who actually escaped because the records were burned on the way out. The United States version of this problem is that your inmate roster may be on a server in a building that no longer has power.

Build the BOLO in passes. Version 1 is "something bad happened, here's what to watch for, don't approach." Version 2 goes out when you have the roster, with specific names and threat classifications. Version 3 is the update at 12 hours with recovered persons removed and any new information on the still-missing. Versioning a BOLO rather than issuing it once is how you keep it current without flooding the field with contradictions.

The worst BOLO is the one that is too confident too early. The second worst BOLO is the one that never goes out because you're still waiting for the roster.

First: accept that your location tools are now degraded, and change your call script accordingly. Every call-taker, on every call, gets location verification as the first substantive question after "911, what's your emergency." Not later. First. If you usually rely on ALI to confirm what the caller tells you, now you're relying on the caller to confirm what ALI guesses at. It is a different conversation and the time budget on each call goes up by 15-30 seconds, which compounds fast.

Second: use whatever integrated location tools are available even if they are normally secondary. RapidSOS Portal queries, carrier-initiated emergency location updates, and device-based hybrid location become primary rather than supplementary. If your center is on RapidSOS, this is the scenario it was designed for. If your center is not, tonight's after-action is a good place to make the case.

Third: triage with explicit location confidence as a factor. A call with high location confidence and a moderate-severity complaint may get a unit faster than a call with low location confidence and a more severe complaint, because you can actually send the unit to the right place. This feels wrong and in a normal shift it is wrong, but in a mass-event with degraded location you are optimizing for "calls we can actually resolve" rather than "calls ranked purely by severity." That's a supervisor call, not a call-taker call, and it should be explicit so it can be defended in the after-action.

Every disaster AAR includes the sentence "we didn't anticipate how quickly the cell network would degrade." Anticipate it now. Build the degraded-network workflow now. Practice it.

The structural move is to split the center. Mass-event operations and the escape operation become separate desks with separate supervisors, separate radios, and separate CAD queues. One desk runs the disaster. The other desk runs the escape. They coordinate through a third position - often the senior supervisor or a designated liaison - but they do not share queues, because if they do, the escape calls will be drowned by the disaster calls or vice versa, and both problems will get worse.

The second move is to stand up outside help. Mutual-aid call-taking exists in most regions and is dramatically underused. A neighboring PSAP can take overflow calls, file incidents into your CAD via liaison, and give your staff a chance to breathe. Regional mutual-aid call-taking is something that has to be pre-arranged - if you're calling about it for the first time during the disaster, you're too late.

The third move is rest cycles. Your staff is going to be on the floor for 12 hours minimum. Hard-mandate 15-minute sit-downs in rotation from hour four onward, and force food and water. The supervisor who does not eat and does not step off the floor is the supervisor who makes a bad call at hour seven that ends up in the AAR. Exhaustion is a predictable failure mode. Build a rest protocol that is non-negotiable and enforce it on yourself first.

The fourth move is documentation. Someone - a trainee, a records clerk, a volunteer from admin - needs to be running a timeline log of decisions, authorizations, and notifications the supervisor is making. Not CAD - a separate shift journal. Six months from now when the review board asks why mutual aid was requested at 05:18 and not 04:18, the answer "here are the timestamps and here's what I knew when" is the only answer that works.

The supervisor's job on a day like this is not to work calls. It is to build the structure that lets other people work calls. The second she starts taking calls herself, the structure starts to fray.

The reckoning that belongs to the comm center: the nine-minute flag delay, the BOLO timing, the mutual-aid activation timeline, the cell-network degradation response, and the split-desk structure (or absence of one). These are all things the center controls. They will have metrics attached. Those metrics should be compared against industry standards and against the center's own prior practice. Where they fell short, the center owns it, fixes the process, and documents the fix.

The reckoning that belongs to Arkham: why didn't anyone answer the phone. Why wasn't there a post-event roll-call protocol. Why didn't the facility have a battery-backed alert system that auto-notified the comm center on containment breach. These are facility-side failures the comm center cannot solve from the outside.

The reckoning that belongs to the region: the absence of a regional mutual-aid call-taking agreement, the absence of a fusion-center-driven mass-BOLO workflow, the absence of a shared protocol for inter-agency communications during simultaneous mass-casualty and mass-escape events. These are systemic and the comm center can advocate for fixes, but cannot unilaterally implement them.

The worst version of this after-action is one where the comm center absorbs blame for systemic failures it did not cause and could not have fixed. The best version is one where the center is honest about what it controlled, clear about what it didn't, and specific about what needs to change at every level. Do not let the AAR be a forum for scapegoating the call-taker who was doing her job in a system that wasn't ready.

The call-taker at 04:51 did everything right. Make sure she knows it. Then make sure the system she was working inside of does better next time.
About This Exercise

This is a fictional scenario set in a fictional city. Gotham is not real. Arkham Asylum is not real. The Joker is not real and is not walking around tonight. However, the operational problems in this exercise - simultaneous mass-casualty response and mass-escape coordination, cell network degradation during disaster, facility comms failure at the worst possible moment, BOLO timing under information scarcity, and the on-duty supervisor inheriting command from a watch commander who cannot physically reach the building - are all real, and every one of them has happened in U.S. comm centers in the last twenty-five years. The Haiti National Penitentiary collapse (January 2010), the Orleans Parish Prison flood abandonment (August 2005), and the Croix-des-Bouquets mass escape (February 2021) are drawn from verified reporting and human-rights documentation. What happens in a quake-and-escape situation is not in any doctrinal manual because the doctrine has not been written. Write it in your center before you need it.

A note from the Containment Breach desk Gotham doesn't exist. The disaster underneath it does. Every mass-casualty event in the real world has the same three enemies: time, information scarcity, and cognitive load on the people making decisions. When you add a mass escape on top of it, all three get worse at once. The useful thing this exercise does is let us look at those three enemies together without the fog of a real incident making it impossible to study them. If the Joker in this exercise distracts you from the fact that what you're actually reading is a combined earthquake-plus-jailbreak scenario straight out of Port-au-Prince in 2010, that's by design - because the campy framing is the vehicle, not the lesson. The lesson is that the comm center's job in a catastrophe is structure, not heroics. Build the structure on a Saturday. You don't get to build it on the day.