BreachRx Offers FREE, Fully Facilitated AI Tabletop Exercises for Hospitals and Healthcare Companies
On May 26, 2026, Cornerstone Behavioral Healthcare discovered a ransomware attack and suspended the attackers’ access within an hour. It restored its electronic data without paying the ransom. But the investigation continued. After initially identifying 2,830 individuals whose information may have been compromised, Cornerstone discovered that an appointment-reminder log involving an additional 12,000 individuals may have been viewed or accessed during the attack. That discovery came on July 22, nearly two months later.
How would your organization respond as the scope expanded? Who would reassess notification obligations, guide patient-facing teams, and explain the changing facts to leadership?
BreachRx is offering a FREE, fully facilitated AI tabletop exercise for qualifying major hospitals and healthcare providers to help you find out how prepared you are. Part of the launch of AI Tabletops on Demand, powered by Rex AI, the exercise is run and managed by BreachRx and tailored to your environment, risk priorities, and needs.
What Your Organization Will Get
- A scenario built around your operations. BreachRx works with you to identify objectives, participants, relevant systems, and business dependencies. Preparation includes facilitator guidance, scenario developments, discussion prompts, and participant materials.
- Expert facilitation supported by Rex AI. BreachRx leads the session, with preparation supported by the Rex AI Exercise Agent and Maestro, the Rex Platform’s primary coordinator agent. Your team makes the decisions as the scenario unfolds.
- Practice in the environment used for live response. Participants work inside the Rex Platform™, rehearsing ownership, escalations, approvals, notifications, and cross-functional handoffs. Actions and decisions become part of a consistent exercise record.
- Documented findings and next steps. After-action reporting, an executive summary, identified gaps, and prioritized recommendations help your team update procedures, clarify responsibilities, and assign improvements to accountable owners.
A Cornerstone-Inspired Scenario, Tailored to Your Needs
For your free tabletop, BreachRx can use Maestro to turn a Cornerstone-inspired scenario into an exercise built around your environment, risk priorities, and response procedures. Preparation could start with a request to create the exercise, followed by refinements like these:
- Build the exercise.
Create a 45-minute ransomware tabletop using the supplied Cornerstone incident summary and our incident response plan. Include four escalating injects, a facilitator guide, and questions for security, IT, privacy, legal, clinical operations, and communications. - Adapt it to your environment.
Tailor the scenario to our [EHR system] and [number of locations]. Test how IT and clinical leadership coordinate to maintain patient care while investigating potential patient-data exposure. - Focus on our priority risk.
Add a development where investigators discover additional patient records after systems recover. Test who reassesses notification obligations, approves revised patient messaging, and updates leadership. - Prepare for the board’s question.
Create a 30-minute micro-tabletop for security, privacy, and communications to test our response to a similar breach. Include a board-summary template covering what we practiced, gaps identified, and improvements to complete.
These are illustrative prompts, not additional claims about Cornerstone’s incident. BreachRx works with your team to refine the generated materials and leads the session. A behavioral health provider could emphasize sensitive treatment information; a multi-site hospital could test escalation across facilities; another organization could practice switching to out-of-band communications. The exercise reflects the decisions your team needs to rehearse.
When the Board Asks, “Are We Prepared for an Attack Like This?”
The free session introduces the BreachRx repeatable approach to readiness. When another healthcare breach makes headlines, your team can use AI Tabletops on Demand and Maestro to build a focused micro-tabletop: a short exercise tailored to the new incident and your environment. Bring together the relevant teams and rehearse the decisions a similar attack would demand.
For a Cornerstone-inspired micro-tabletop, security, privacy, and communications could practice handling an expanding patient list. Document what worked, assign actions for gaps, and repeat the exercise to test the fixes.
That gives the board a concrete answer: what your team practiced, what it learned, which improvements are complete, and what remains unresolved.
Apply for Your FREE Healthcare Tabletop Exercise
Tell us about your organization, the risks you want to rehearse, and the teams you need to involve. BreachRx will review eligibility and coordinate the scope and a mutually agreed exercise date.
