This scenario is a Major Data Breach with no Ransom Demand involving the loss of a considerable amount of data into the public sphere.
You will find three documents for download below: Facilitator notes, Handouts and Slides. After minimal rebranding and any customisation, this is all you will need to run the exercise.
Facilitator Overview
Handouts
Slides