Basic Education Minister confirms insider behind 2025 NSC exam leak

Basic Education Minister Siviwe Gwarube confirmed on Thursday that a Department of Basic Education (DBE) employee is implicated in a leak of National Senior Certificate (NSC) exam papers.

Gwarube said the leak involved seven exam papers, which were accessed by learners in seven schools in Pretoria ahead of the scheduled exams.

In a media briefing, Gwarube detailed how the breach was detected and addressed through the department's stringent security protocols.

She emphasised that the incident, while concerning, was an isolated event and that the department’s robust systems had functioned as intended to identify and contain the breach.

“Our system has worked exactly as it was designed to do: to detect, isolate, investigate, and address any manipulation of the NSC examinations,” Gwarube said.

The breach was first flagged on December 2, when markers in Gauteng noticed an unusual similarity between a candidate’s answers and the official marking guidelines for English Home Language Paper 2.

This triggered a deeper investigation, revealing that several key exam papers, including English Home Language Papers 1, 2, and 3, Mathematics Papers 1 and 2, and Physical Science Papers 1 and 2, were accessed prior to the exam date. These papers had been circulated via a USB storage device, she said.

Gwarube confirmed that the source of the leak was traced to the DBE’s own offices, where the exam papers were set.

The suspected employee, who had access to the materials, allegedly shared them with another DBE staff member working in the examination unit, she said.

“The breach occurred within the DBE offices. Of the 162 papers set for the 2025 NSC exams, seven were accessed before the examination date,” she said.

While the breach was localised to a specific area in Pretoria, Gwarube said that there was no evidence to suggest it had spread beyond these seven schools.

The investigation, which involved interviews with 26 learners whose scripts were flagged, confirmed that these students had prior access to the exam papers and the marking guidelines.

However, Gwarube made it clear that these learners would be afforded due process. “We are not making assumptions about guilt. Each case will be individually assessed,” she said. 

In response to the incident, Gwarube said the DBE has suspended the implicated employees and referred the matter to the police for further investigation.

Gwarube highlighted the criminal aspects of the case, noting that the possession of state material without proper authorisation is a criminal offense.

“We follow a zero-tolerance approach to cheating in the NSC exams. This breach is not just an internal DBE issue but also a criminal matter, and we have reported it to the South African Police Service,” she said.

The department’s stringent security measures, including the use of expert markers, statistical verification, and investigative marking, played a critical role in detecting the irregularity. Gwarube praised the diligence of the markers, explaining that their training in investigative marking was key in identifying the breach.

“Markers are our first line of defense. Their expertise, combined with our multi-layered quality assurance process, is one of the greatest strengths of the system,” she said.

The DBE has also established a National Investigative Task Team (NITT) to further probe the breach. This team, which will include officials from Umalusi, Universities South Africa, the South African Council for Educators (SACE), and private forensic investigators, will investigate the full extent of the leak, identify all involved learners, and recommend measures to prevent future breaches.

“The task team will confirm the exact source of the breach, verify the spread of the leak, and recommend steps to safeguard the integrity of the NSC exams moving forward.”

The investigation will also include a range of forensic measures, such as investigative marking, statistical analysis, and interviews with learners and invigilators.

One of the methods being deployed is the correlation of exam marks with school-based assessments to detect any unusual performance spikes. Gwarube emphasised that these rigorous investigative processes would ensure that the incident is thoroughly understood and addressed.

Although the breach has been contained, the DBE assured the public that no final results have been issued, and marking continues as scheduled.

"I want to assure the public that no results have been finalised, and no certification processes have begun," Gwarube said.

Cape Times