The Victorian Curriculum and Assessment Authority (VCAA) is investigating after its website was hacked on the evening of Wednesday 11 November 2026, during the Victorian student exam period, ABC News reported.

A VCAA spokesperson confirmed to the ABC that the breach was under investigation and said: "The VCAA is conducting a forensic investigation to determine the extent of the attack" and "There is no indication that exam papers from today or previous weeks have been accessed."

According to the ABC, the VCAA home page first showed an error message, which was later replaced with a "We'll be right back" maintenance notice.

The ABC reports that the defaced version of the site carried a message criticising the digital security of the VCAA and of providers of printing and legal services.

VCAA CEO Andrew Smith told 774 ABC Melbourne: "We've worked overnight; there is no evidence that these exams have been leaked." Exams for Victorian students are scheduled through to 18 November. (source: ABC News)

Correction (12 Nov 2026): this card repeated the hacker's unconfirmed claim that 2026 exam papers were stolen and distributed; that claim came only from the hacker's defacement message and has been removed.

The VCAA says there is no indication exam papers were accessed. (source: ABC News) Updated (12 Nov 2026): VCAA chief executive Andrew Smith told Information Age that although the VCAA homepage was 'the subject of vandalism', an initial investigation found no evidence that any sensitive data or exam papers had been accessed, and that 'The VCE exams will continue as normal.'

Information Age reports the incident has been reported to Victoria Police, and that VCAA has not disclosed how or when the attacker gained access. (source: Information Age)