VCAA Exam Website Hacked; No Evidence of Exam Paper Theft
Article Content
- •The VCAA website was hacked, but no exam papers were accessed according to VCAA.
- •The hacker claimed to have sold VCE exam papers to hundreds of students, raising concerns among students and parents.
- •The incident has been reported to Victoria Police, and a forensic investigation is underway.
The Victorian Curriculum and Assessment Authority (VCAA) confirmed its website was hacked on November 11, 2026, by an individual using the alias 'DaggerElite'. The hacker claimed to have sold VCE exam papers to hundreds of students, but VCAA stated there is no evidence that any exam papers were accessed or leaked. The incident has raised concerns among students and parents, especially as exams are ongoing until November 18. VCAA's website was taken offline for maintenance following the hack, and the incident has been reported to Victoria Police. VCAA chief executive Andrew Smith emphasized that the claims made by the hacker are fabricated and designed to exploit anxious students. The VCAA is conducting a forensic investigation to assess the breach and improve security measures.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (13)
Following this threat?
Track GoAhead Lawyers in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Are students at risk of having their exam papers accessed?
What actions is VCAA taking in response to the hack?
What should students do if they are worried about the hack?
Continue Reading
Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has… 
Critical Code Injection Vulnerability in Staggs Plugin for WordPress A critical code injection vulnerability, CVE-2026-78287, has been identified in the Staggs plugin for WordPress, affecting versions up to 3.3.0. This flaw allows unauthenticated attackers to execute arbitrary code remotely, posing severe risks to affected sites. The vulnerability stems from improper control over code…