In May 2021, the Conti ransomware group executed a highly sophisticated attack on Ireland's Health Service Executive (HSE), leading to the theft of 700GB of sensitive data and a temporary shutdown of critical healthcare systems, including COVID-19 vaccination services. While decryption keys were eventually provided, the attackers still leaked parts of the stolen data, raising questions about their motives and tactics. This training scenario will guide you through the steps of analyzing and responding to this complex cyber crisis.