Hacker claims to have sold stolen exams to AU students, DataBreaches.net reports

What happened

According to a headline published by DataBreaches.net on 2026-11-11, a hacker claims to have sold stolen exams to students in Australia, but marked them for identification purposes. The headline ends with a question mark, and it is the only material available. The full article could not be reviewed, so this advisory goes no further than the headline DataBreaches.net: AU: Hacker claims to have sold stolen exams to students, but marked them for identification purposes?.

Not confirmed: whether any exams were actually stolen or sold, which institution or provider is involved, how the exams were obtained, how many exams or students are involved, and whether the affected party has confirmed anything. The claim is the hacker’s, as relayed by DataBreaches.net, and has not been independently verified in the material available.

Am I affected?

Not confirmed. The headline does not name the institution, the exams, the systems involved or any software. No CVE, vendor, product or version is mentioned. If you are not connected to an Australian education provider, there is no indication from this source that you are affected.

What to do now

1. Read the full DataBreaches.net article, which this advisory could not review, for details beyond the headline.
2. If you administer exam systems at an Australian institution, confirm who has access to exam materials and review recent access logs for unusual activity.
3. Watch for statements from the institution involved. Treat the hacker’s claim as unverified until the institution or an authority confirms it.
4. If you are a student or staff member, follow guidance from your own institution rather than acting on the claim alone.

Sources

• DataBreaches.net: AU: Hacker claims to have sold stolen exams to students, but marked them for identification purposes?