Son of DBE HR official emerges as key distributor in leaked matric exam papers scandal

A Department of Basic Education (DBE) human resources official has been identified as the source of a localised but significant leak of 2025 National Senior Certificate (NSC) examination papers, with her Grade 12 son acting as the primary distributor.

This explosive revelation was made yesterday by Professor Chika Sehoole, chairperson of the National Investigative Task Team (NITT), as the country counts down to the release of the 2025 NSC results next Tuesday.

The scandal, which the NITT concluded was "localised and limited," implicates 40 learners across eight schools in the Tshwane area. The results for these 40 candidates will be temporarily withheld pending formal irregularity hearings, announced Basic Education Minister Siviwe Gwarube during a joint media briefing with Professor Sehoole following the release of the NITT’s interim report.

The investigation confirmed that the leak originated from a secured examination unit within the DBE National Examinations Office. Evidence, corroborated by learner interviews and written statements, shows that the departmental HR official’s son received a USB containing question papers and marking guidelines from his mother, a DBE employee.

The son was then responsible for the further distribution of the leaked material. The breach was initially suspected after the department identified an "unusual similarity" between a candidate’s responses and the official marking guideline for English Home Language Paper 2.

This suggested prior access and triggered the department’s internal investigation between December 2 and 11. The NITT was formally appointed on December 15 to establish both the source and the spread of the breach. The confirmed leaked materials include seven examination papers in total: English Home Language Papers 1 and 2, Physical Sciences Papers 1 and 2, and Mathematics Papers 1 and 2. While claims of additional papers, including CAT, Afrikaans First Additional Language, Geography, and Economics, being circulated were reported, these could not be corroborated by statistical analysis or investigative marking. The investigation was comprehensive, utilising six work streams aligned with DBE protocols.

Key methods included:

• Forensic Investigation: A private forensic firm examined 11 electronic devices, including desktops, smart watches, laptops, and exam servers, and analysed CCTV footage to trace the source of the breach.
• Statistical Analysis: This identified anomalous performance trends, prompting the initial flagging of candidates. The analysis was eventually extended nationwide to ensure no other high-average marks were overlooked.
• Investigative Marking: Trained markers reviewed scripts from 17 centres for signs of cheating, such as identical or near-identical responses and verbatim reproduction of marking guidelines.

The leaked materials were transmitted via various methods, including USB drives, WhatsApp messages, screenshots, printed copies, and other messaging platforms. A notable finding by the NITT was that "Some candidates used AI tools, including ChatGPT, to structure responses based on leaked marking guidelines," signalling a new technological challenge to examination security.

Gwarube confirmed that suspected officials have been suspended pending investigation, and the matter has been reported to the police. A forensic service provider has been appointed to expand the investigation and identify any additional suspects.

The consequences for the implicated candidates will be severe. Each of the 40 learners will face an independent irregularity hearing. Candidates found guilty risk having their results in affected subjects nullified and could be barred from writing the NSC examinations for up to three sessions. Umalusi CEO Dr Mafu Rakometsi presented the findings alongside the NITT, affirming that the breach did not compromise the overall credibility of the 2025 NSC results.

However, he warned that Umalusi retains the authority to cancel certificates even after they are issued if irregularities are later discovered. Learners whose certificates are cancelled must return them within three weeks or face possible fines or imprisonment. The NITT presented its final findings to Umalusi on Tuesday.