A 19-year-old cybersecurity researcher claimed he hacked into CBSE's OSM system, used to re-evaluate Class 12 Board exam answer sheets, and was able to change any students' marks. He reported the vulnerabilities on February 25, with CERT-In responding that they're "taking appropriate action" the next day. However, vulnerabilities remained active, and the portal was finally taken down on May 26.