VCAA website hack: Year 12 exam papers stolen and distributed to students
Severity: high · Patch status: no-fix-needed · Since 2026-11-11
A hacker breached the Victorian Curriculum and Assessment Authority (VCAA) website on Wednesday evening, posting a mocking message about the authority's security and claiming to have obtained and distributed this year's Year 12 exam papers. The hacker claims to have sold stolen exams to students, though reports note the papers were marked 'for identification purposes', raising questions about the claim's validity. Victoria's Year 12 (VCE) exams have been thrown into turmoil as a result, with potential integrity and fairness implications for students sitting the exams. No CVE applies; this is a breach of a state education authority. Remediation depends on VCAA's investigation, incident response, and decisions on exam integrity.
What to do
- Monitor VCAA advisories for confirmation of which exams are affected and any rescheduling
- Review access controls, web hardening, and monitoring on public-facing education systems
- Prepare incident-response and communications plans for exam-integrity incidents
- Investigate potential insider or credential-based access paths to sensitive exam materials
Sources
All live incidents on Threat Watch