In the wake of the infamous NotPetya attack, the pharmaceutical industry faced unprecedented challenges. Operations worth $1.4 billion were disrupted, particularly affecting vaccine production. As Sandworm's malicious campaign unfolded, questions arose about the adequacy of cyber insurance coverage, sparking a landmark legal battle over 'act of war' exclusions. In this expert-level training scenario, participants will delve into the intricate details of Sandworm's tactics and the ensuing fallout.