The Victorian Curriculum and Assessment Authority has confirmed its website was hacked on Wednesday evening, during one of the most critical periods of the school calendar, but insists there is no evidence that VCE exam papers were accessed or distributed despite claims to the contrary left on its own homepage.
What happened: the VCAA website hack explained
At around 6pm on Wednesday, visitors to the VCAA website were greeted by an expletive-laden message posted by someone using the alias "DaggerElite". The message claimed the hacker had breached not only the VCAA's systems but also those of an external printing provider, from which VCE exam papers were allegedly downloaded directly from internal file servers.
The hacker claimed to have then distributed copies of those papers to "hundreds of students statewide" using email details obtained by also compromising a legal services provider. The message described each distributed copy as carrying an individualised, identifiable signature, and warned recipients against sharing the papers publicly.
"Thanks to the support of these awesome hundreds of students statewide, we will hopefully be able to prepare the exam pages to be sent out even earlier," the message read, claiming the scheme would be repeated ahead of the 2027 exam year.
Within hours, the VCAA homepage was taken down and replaced with a maintenance notice reading "We'll be right back", where it remained for several hours after the incident.
VCAA response: forensic investigation under way, exams to continue
In a statement, the VCAA described the incident as an act of "vandalism" on its site and said an initial investigation had found no indication that exam papers from Wednesday or any previous weeks had been accessed. The authority confirmed it had reported the matter to Victoria Police and said a full forensic investigation was under way to determine the extent of the attack.
Critically, the VCAA confirmed that VCE exams would continue as scheduled. The 2026 exam period still has approximately one week to run, with language exams set to conclude on November 18. Results are due to be released on December 10.
The law firm named in the hacker's message, GoAhead Lawyers, also issued a statement on Wednesday evening. Principal lawyer Sukhwinder Singh said the firm suspected its email address had been spoofed by a third party, a technique involving the creation of an email with a forged sender address. Singh said internal checks had found no record of any emails distributing VCE papers being sent from a GoAhead Lawyers account, and confirmed he had reported the suspected spoofing to the VCAA and would assist with its inquiries.
Parents and students alarmed despite official reassurances
The hack rattled families with children still sitting exams. One parent, David Charlesworth, said his daughter in her final year had been alerted to the message by her friends. Even if the hacker's claims about selling papers were false, Charlesworth said the breach itself was deeply troubling.
"They've been through this before," he said, referring to the VCAA's history of exam-related controversies. "They can do a better job."
Other parents voiced concern on social media, with one noting that "students are very upset about this" given that many still have exams ahead of them.
Opposition education spokesperson Brad Roswell said he had sought a formal briefing from the department and the VCAA, while Education Minister Gabrielle Williams was contacted for comment.
A troubled recent history for the VCAA
The hack comes at a particularly sensitive time for an authority that has faced intense scrutiny over its handling of exams in recent years. In 2024, a significant bungle saw the VCAA unintentionally publish 56 test papers, giving thousands of students an unfair advantage over their peers. That incident prompted a government-ordered review, the resignation of then-chief executive Kylie White, and the subsequent sacking of the board in 2025. Errors in exam papers were also identified during the 2022 and 2023 exam periods.
In April this year, the Victorian government announced an investment of more than $222 million to rebuild the VCAA, with the stated aim of safeguarding exams over the long term. Wednesday's hack raises fresh questions about whether those efforts are moving quickly enough.
Cybersecurity experts have long warned that institutions holding sensitive data, including examination materials, face growing risks from opportunistic and targeted attacks. Understanding the core pillars of digital security is increasingly essential for any organisation managing confidential records at scale.
The VCAA has not yet provided a timeline for when its full forensic investigation will be complete, nor has it indicated whether the identity of the person behind the "DaggerElite" alias has been established. Victoria Police are understood to be actively investigating the matter.
Students with upcoming exams are advised to check official VCAA channels for any updates and to proceed as normal unless otherwise instructed.
