This paper introduces Break Escape, a novel escape room inspired games-based learning framework that simulates cyber-physical security challenges. Unlike traditional cyber security educational approaches, Break Escape creates immersive experiences where learners must engage with both physical and digital security mechanisms within narrative-driven scenarios that are explicitly mapped to the Cyber Security Body of Knowledge (CyBOK). Break Escape draws inspiration from physical escape rooms, adapting their engaging puzzle solving mechanics to create virtual environments where physical and digital security elements are combined. The framework employs constructivist learning principles through scenarios that require critical analysis and practical application of technical security skills via puzzle chains. Players must apply knowledge of encryption, encoding, and engage in simulated physical security mechanisms to progress through scenarios. This approach aims to address the “reflection gap” identified in many existing cyber security games by requiring players to actively apply security knowledge rather than merely encountering security terminology during gameplay. Implemented using Phaser.js with browser-based deployment, the system features a flexible JSON-based scenario specification that enables educators to create custom content without programming knowledge. Each scenario is explicitly mapped to relevant CyBOK knowledge areas, helping learners recognise the relationship between their in-game actions and established cyber security principles. Preliminary evaluation using the Player Experience Inventory demonstrated high engagement scores (enjoyment M = 6.25/7, immersion M = 6.00/7).