CK-12 Foundation (operating Braingenie) reported an unauthorized access to its QA/test database occurring in late February 2020, discovered in early June 2020. Unauthorized actors obtained a small amount of personal information, including user login credentials (username/email and encrypted passwords, potentially decrypted). The incident was limited to a subset of users. CK-12 engaged forensic experts and law enforcement, reset passwords, and enhanced security protocols.