VCAA website hacked during 2026 VCE exam period; no evidence of exam paper leaks

Consensus Summary

The Victorian Curriculum and Assessment Authority (VCAA) confirmed on November 11, 2026, that its website was hacked, with a defiant message from an individual using the alias 'DaggerElite' appearing on its homepage around 6pm. The hacker claimed responsibility for accessing and selling VCE exam papers to students across Victoria, though VCAA has stated there is no evidence that actual exam papers were compromised. Both *The Age* and *ABC* reported the incident, emphasizing the urgency of the investigation as exams continue through November 18.

The breach comes amid a backdrop of ongoing scrutiny for VCAA, which has faced repeated security failures. In 2024, the authority accidentally published 56 test papers, giving thousands of students an unfair advantage. That incident led to the resignation of then-chief executive Kylie Smith and the dissolution of the VCAA board in 2025. The current hack has reignited concerns about the organization’s ability to safeguard sensitive exam materials, particularly as students and parents express frustration over repeated disruptions.

VCAA spokesperson statements, as reported by both outlets, clarified that no exam papers from November 11 or prior weeks had been accessed, though the forensic investigation is ongoing. *The Age* provided additional context, including the hacker’s claims of breaching external printing providers and a law firm’s email system to distribute the exams. The hacker also hinted at plans to sell 2027 exam papers earlier, though VCAA has not confirmed any validity to these threats. Meanwhile, parents like David Charlesworth, whose daughter is in her final VCE year, voiced skepticism about the authority’s handling of the situation, noting past failures and the need for improved security.

While both *The Age* and *ABC* agree on the core details of the hack and VCAA’s response, *The Age* includes more specific claims from the hacker, such as the alleged sale of exams to 'hundreds of students statewide' and the involvement of a law firm’s email system. *ABC*, however, focuses more on the technical disruption, describing the initial error message and the temporary maintenance notice on the VCAA website. These differences highlight varying emphases in the reporting, with *The Age* delving deeper into the hacker’s claims and their broader implications for students and parents.

As of November 11, the investigation remains active, with VCAA working to assess the full extent of the breach. The 2026 VCE exam period is set to conclude on November 18, with results scheduled for release on December 10. Political figures, including the Coalition’s education spokesperson Brad Roswell, have engaged with the issue, seeking briefings to understand the situation better. The unresolved question remains whether the hacker’s claims hold any truth, particularly regarding the sale of exam papers, though VCAA’s current stance is that no evidence supports such allegations.