After Escalation
What to expect: in most cases, a professional will assess the situation. They'll either confirm it's not a problem, take remediation steps (changing credentials, revoking access, documenting what happened), or escalate further if the situation is more serious. In some cases, they'll need information from you about exactly what happened, what data was involved, and when.
Your job after escalating is to cooperate fully, answer questions accurately, and not attempt to remediate on your own in ways that might complicate the professional response. If you've shared credentials, don't change your password alone — the professional may need to track what happened. If you've exposed data, don't delete anything — evidence may be necessary. Let the professionals work. They know what they're doing.