Victorian VCAA Exam Website Hacked, Hundreds of Tests Allegedly Sold

Heraldsun.Au

Victorian VCAA Exam Website Hacked, Hundreds of Tests Allegedly Sold

First seen 12 Nov 2026, 20:14 UTC • •49.5

Article Content

1 / 4

Browse articles

ThreatCluster •November 12, 2026 at 20:15 UTC

•VCAA's website was hacked, leading to the alleged sale of stolen VCE exam papers.
•The hacker, known as DaggerElite, claims to have sold tests to hundreds of students.
•Law enforcement is investigating the breach amid concerns over VCAA's security standards.

The Victorian Curriculum and Assessment Authority (VCAA) has been hacked, with a cybercriminal known as DaggerElite claiming to have sold hundreds of stolen VCE exam papers. The breach has raised significant concerns about the security standards of the VCAA, which is already facing scrutiny over previous scandals. The hacker's actions are reportedly aimed at promoting a mass cheating scheme among students. Law enforcement has been notified, and an investigation is underway to assess the full impact of the breach. The exact method of attack has not been disclosed, but the incident highlights ongoing vulnerabilities in educational cybersecurity.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 4h ago How this analysis works

Timeline

2026-11-12

VCAA hacked, exam papers leaked

DaggerElite claims to have sold hundreds of stolen VCE exam papers, prompting police involvement.

More articles in this cluster (3)

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Threat Actor (1)

DaggerElite

Technique (4)

Data Breach
Malware
Phishing
T1566 - Phishing

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

DaggerElite uses Data Breach
DaggerElite uses Malware
DaggerElite uses Phishing
DaggerElite uses T1566 - Phishing
DaggerElite related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track DaggerElite in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What specific tests were compromised?

The articles do not specify which VCE exam papers were compromised, only that hundreds were allegedly sold.

Is there a known method of attack?

The articles did not disclose the specific method used by the hacker to breach the VCAA website.

What actions are being taken by authorities?

Police have been notified and an investigation is underway to determine the full extent of the breach.

Continue Reading

Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has…

Critical Code Injection Vulnerability in Staggs Plugin for WordPress A critical code injection vulnerability, CVE-2026-78287, has been identified in the Staggs plugin for WordPress, affecting versions up to 3.3.0. This flaw allows unauthenticated attackers to execute arbitrary code remotely, posing severe risks to affected sites. The vulnerability stems from improper control over code…