In 2015, the U.S. Office of Personnel Management was breached by a sophisticated APT group, resulting in the compromise of 21.5 million federal employee records. This training scenario focuses on the deployment of the PlugX RAT, theft of fingerprint records, and the impact on national security through stolen SF-86 forms. Trainees will delve into the tactics and techniques used by the attackers, specifically APT1's strategic exploitation, persistence, and data exfiltration operations.