The website of the Victorian Curriculum and Assessment Authority remains down during the state’s busy exam period after a hacker took over the front page and made several claims regarding selling exams to students and the state of the VCAA’s cyber security.
The hacker, who calls themselves DaggerElite, claimed to have already sold copies of the Official VCA 2026 2026 Exam to “hundreds of students statewide” in a message posted to the site’s front page.
“We will hopefully be able to prepare the exam pages to be sent out even earlier than we have been able to this year, so you can study the paper you will sit in 2027 well in advance!” the hacker said.
The VCAA has refuted the hacker’s claims.
“ The VCAA homepage was the subject of vandalism earlier today,” said VCAA CEO Andrew Smith.
“An initial investigation has shown no evidence that any sensitive data or exam papers have been accessed.
“The VCE exams will continue as normal.”
The VCAA added in a further comment that “claims made in relation to VCE exams are fabricated.”
“There is no evidence at all that any VCE exams have been accessed or leaked,” A VCAA spokesperson said.
“These are false claims designed for financial gain from the exploitation of anxious students.”
The hacker also commented on the VCAA’s site security.
“A massive thank you also goes to the VCAA and their dogshit security standards on their website, allowing me to map out this shitshow site and learn all about its internals,” DaggerElite said.
The hacker also claimed to have compromised the VCAA’s external printer providers, which were allegedly the source of the stolen exams.
Smith later told ABC Radio Melbourne that the VCAA’s website would be restored as a “matter of urgency”.
“Once we’ve completed our investigation, we will go back, look at the root cause of what might have happened, and any changes we need to increase the security around our corporate website will certainly be made,” Smith said.
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.