The recent matric results leak has raised serious concerns about data security and unauthorised access to student information. The breach, involving the early release of National Senior Certificate (NSC) results, has led to a criminal investigation and regulatory intervention. Here’s an overview of what happened.
Timeline of Events
Early January 2025
A company called Edumarks advertised a service offering matriculants access to their official results up to seven days before the official release date—for a fee of R100. The company claimed a 97% accuracy rate based on previous years’ results. Department of Basic Education (DBE) initially dismissed these claims calling Edumark a “bogus business offering a service it cannot deliver on.” The DBE went further in stating that if the Edumarks claims were true that they’d be committing fraud and colluding with persons who have unauthorised access to the matric results database.
11 January 2025
Reports emerged that Edumarks had begun sending out matric results, despite the official embargo until midnight on 14 January 2025.
14 January 2025
The DBE confirmed that the leaked results were authentic and announced an investigation into how Edumarks obtained the data. Spokesperson Elijah Mhlanga stated:
“The Department is investigating the early and unauthorised access of the National Senior Certificate results data by a company … A criminal case has been opened and The Hawks are investigating the matter.”
16 January 2025
The Hawks’ Serious Economic Offences Unit arrested a 21-year-old suspect in Johannesburg in connection with the leak. During the arrest, authorities seized multiple electronic devices. The suspect remains in custody as investigations continue.
Response from the Information Regulator to the matric results leak
“Any unlawful access to, and usage of, personal information of data subjects is treated with extreme seriousness and concern by the regulator. The security compromise of learners’ personal information under the custody of the DBE is no different,”
– the Information Regulator.
This data breach comes after the Information Regulator, unsuccessfully, tried to prevent the DBE from release the 2024 matric results through its usual channels. This resulted in the Information Regulator issuing an enforcement notice to the DBE.
Insights into the matric results leak
The matric results leak underscores the growing risks of data breaches and the need for stricter safeguards to protect student information. As investigations continue, this incident serves as a reminder that personal data must be handled responsibly and lawfully. The swift response from the DBE, the Hawks, and the Information Regulator highlights the seriousness of the breach and the commitment to holding those responsible accountable.
