When something looks wrong, do not panic-click your way into a bigger problem. Preserve evidence, disconnect affected devices if needed, record what happened, notify the right people, change exposed credentials from a clean device, and avoid deleting logs before review.
Resource
Oops Plan: Incident Response Checklist
The calm little checklist for the first hour after something starts beeping metaphorically.