The threat actor claims to have obtained remote code execution and super administrator access to the ICAI examination system. The access reportedly includes access to answer sheets of all students who appeared in the May 2026 examinations and reportedly allows modification of marks for each question and overall examination papers.