PRETORIA – South Africa’s Department of Basic Education (DBE) has identified officials at its national headquarters as the source of a breach that leaked several matric final examination papers for the 2025 National Senior Certificate, according to Basic Education Minister Siviwe Gwarube. Both officials have been suspended, and 40 pupils from seven schools in Tshwane have been implicated.
The ministry said an interim probe by the National Investigation Task Team (NITT) found the leak originated inside the DBE’s secure examinations environment where question papers are set, processed and managed. Gwarube said the department’s marking and quality assurance systems picked up the anomalies, triggering the inquiry. The investigation is being conducted under the DBE’s powers in terms of the South African Schools Act and the regulations governing the conduct, administration and management of the National Senior Certificate.
What the investigation found
Gwarube, citing the NITT’s interim report, said: “On the evidence available to date, the NITT reported that the breach originated within the DBE’s secure national examinations environment – that is, within the secure environment where NSC question papers are set, processed and managed.”
She added: “The NITT further indicated that, on the evidence available to date, a DBE official whose child was an NSC 2025 candidate is alleged to have been involved in this breach, with the pupil subsequently forming part of the distribution chain. It also noted that a possible second suspected official remains subject to corroboration through the ongoing forensic and investigative work,” Gwarube said.
The NITT, which draws on provincial and national assessment specialists as well as forensic expertise, is expected to submit a final report with recommendations on both disciplinary action and systemic safeguards once its work is complete.
Which papers were leaked
The department confirmed that seven high‑stakes papers were compromised:
- English Home Language: Papers 1, 2 and 3
- Mathematics: Papers 1 and 2
- Physical Sciences: Papers 1 and 2
These subjects are among the core gateway disciplines for university admission in South Africa, amplifying the potential impact of any breach on tertiary entry and scholarship decisions.
Who is affected and immediate steps taken
The DBE outlined the scope of the breach and the steps taken so far:
- Implicated candidates: 40 pupils
- Schools: Seven, all in Tshwane
- Administrative action: Two DBE officials from the national office suspended pending disciplinary processes
- Results: Results for the 40 candidates have been withheld temporarily while formal irregularity processes run their course
- Possible sanctions (if candidates are found guilty):
- Nullification of results in the relevant subjects
- Being barred from writing the NSC examinations for up to three examination sessions
The department stressed that no sanctions will be finalised until affected candidates have been afforded an opportunity to respond, in line with administrative‑justice principles and DBE’s own examination irregularities policy.
How the breach was detected
The department said the breach was detected through its marking and quality assurance systems during the standard post‑exam moderation process. According to Gwarube, markers are the first line of defence, flagging answer patterns that are statistically improbable or display identical errors across scripts.
These anomalies were escalated through established protocols within the national examinations directorate, prompting the DBE to activate an internal risk review, refer the matter to the NITT and inform provincial education authorities.
How the papers were shared
Gwarube said investigators reported a mix of digital and physical dissemination methods:
- Removable storage devices
- Electronic messaging platforms
- Screenshots
- Printed copies
She added: “The NITT further cautioned that evolving technologies – including AI-enabled tools – can be used to disguise misconduct, reinforcing the need to modernise prevention, detection and invigilation controls.” The department is considering additional digital forensics capacity and tighter chain‑of‑custody protocols for future exam cycles, including improved monitoring of electronic transfers within its secure printing and distribution systems.
“We will not compromise the future of thousands of honest pupils because of the actions of a few, and we will leave no stone unturned in ensuring accountability and safeguarding the value of the NSC certificate,” Gwarube said.
Why it matters for matric and the NSC
The NSC, commonly known as matric, is South Africa’s national school‑leaving qualification and forms the backbone of public higher‑education admissions and many entry‑level recruitment processes. Integrity of these papers underpins public confidence not only in individual results, but in the state’s broader education and skills pipeline.
Under DBE policy, leaks of this nature are treated as systemic threats to the examination regime rather than isolated misconduct cases, requiring both disciplinary action and a review of security architecture. The department’s decision to suspend officials, isolate affected candidates and withhold results follows established irregularity protocols designed to protect the credibility of the qualification while due process is completed.
The department said the 40 candidates’ results remain withheld while the official irregularity processes are completed. It has also signalled that recommendations from the NITT may feed into wider examination‑security reforms, alongside guidance from oversight bodies such as the national quality assurer for school and post‑school qualifications, Umalusi.