Industry2026-07-31·7 min read

Odisha MKCG Medical PG Exam Leak: When the Paper Circulates Before the Ink Dries

On July 27, the General Surgery MS/MD question paper at MKCG Medical College was circulating on WhatsApp while the examination was in progress. What happened, why PG medical exams are structurally exposed, and what the incident demands from examination bodies.

What Happened at MKCG Medical College

On July 27, 2026, the question paper for General Surgery — part of the All Odisha Medical PG Examination for the MS/MD 2023–26 batch — was being circulated on WhatsApp groups while the theory examination was still in progress at MKCG Medical College, Berhampur. Photographs of the question paper were shared across multiple WhatsApp groups formed by postgraduate medical students. Answers were being forwarded in real time, even as candidates sat inside examination halls.

The incident came to light when a PG student at a private medical college in Bhubaneswar received the question paper through a WhatsApp group and reported it to the authorities. The Odisha University of Health Sciences (OUHS) launched a formal investigation. A medical student and a senior staff member of the institution are reported to be under suspicion. OUHS subsequently directed all affiliated medical colleges to increase examination security for upcoming assessments.

Officials initially framed the incident carefully: the paper was shared after candidates had already entered the hall and the examination had commenced, which they argued meant it was not technically a "pre-exam leak." This distinction, while legally meaningful under existing paper leak statutes, does not resolve the core problem. If answers are being circulated during an ongoing examination, the integrity of results is compromised regardless of the precise minute the first photograph was taken.

Why PG Medical Examinations Are Particularly Exposed

The MKCG incident is not a one-off failure. It reflects structural vulnerabilities in how postgraduate medical examinations are conducted across India.

Small, tight-knit cohorts: PG medical batches are small — typically 30 to 150 students per programme across theory, clinical, and surgical disciplines. Students in these batches have studied together for years and belong to pre-existing WhatsApp groups. When a question paper enters that network, it propagates instantly. There is no frictionless way to contain a digital file once it reaches a connected group.

Multi-centre examination logistics: Unlike centralised entrance examinations conducted at managed test centres, PG university examinations run across dozens of affiliated medical colleges, each managing its own examination hall, invigilators, and question paper distribution. Security quality varies significantly across institutions. A single weak link in one college affects the credibility of results across all.

Device ambiguity in clinical settings: Postgraduate medical students routinely use smartphones for clinical reference, drug databases, and ward communication. Examination protocols that prohibit devices are operationally at odds with the professional environment these students inhabit daily. Enforcement of device bans is correspondingly inconsistent.

High examination frequency: PG medical students face multiple examination events each year — theory papers, clinical practical examinations, dissertation evaluations, and viva voce assessments. The cumulative number of opportunities for a security breach is higher than in any other segment of Indian higher education.

Separating Upstream and Downstream Security Failures

The Odisha incident is a question paper security failure. The question paper was compromised at the distribution and invigilator management stage, inside the examination hall. The evaluation of what students actually wrote — the downstream process of marking answer scripts — was not the failure point.

This distinction matters because the remedies are different, and conflating them leads to poorly targeted policy responses.

Question paper security addresses the chain from paper setting through printing, dispatch, storage, and hall distribution. Encryption, time-locked digital distribution, staggered opening protocols, and device restriction are the tools for this chain.

Answer script evaluation security addresses the chain from collection of written responses through scanning, evaluation, tabulation, and result publication. Digital evaluation with audit trails, double valuation, and evaluator anonymity are the tools for this chain.

A digital answer script evaluation system does not prevent a question paper from being photographed and shared. But when a paper is suspected to have leaked, institutions need the ability to audit every answer script in granular detail: which evaluator marked it, at what time, question by question, against which marking scheme. Systems without that downstream audit trail cannot demonstrate that the evaluation was fair, even when the only confirmed breach was in the upstream question paper chain.

Five Layers of Security That Failed on July 27

A functioning examination security framework has multiple overlapping layers. Each of the following was inadequate at MKCG on July 27:

1. Physical device restriction: Candidates should not retain mobile devices after entering the examination hall. Enforcement failed or was absent at MKCG, allowing devices to be used while the paper was in circulation.

2. Sealed paper opening protocol: Modern examination security requires question paper packets to be opened in the presence of candidates and a presiding officer at the start of the examination. A detailed log of the opening time and personnel present should exist. The timeline of the WhatsApp circulation suggests this protocol was not maintained securely.

3. Invigilator coverage: Adequate invigilator presence per candidate is the practical mechanism for enforcing device restrictions. Understaffing makes real-time confiscation impractical. Medical college PG examinations, conducted for small cohorts, are sometimes supervised with minimal invigilator presence.

4. Digital forensic readiness: Investigating a WhatsApp-based leak requires identifying who created each group, who had membership, who first shared the document, and from which device. Universities and examination bodies rarely have the forensic capability or legal standing to pursue this investigation rapidly. Investigations lose momentum when technical evidence degrades.

5. Answer script audit trail: The evaluation that follows a suspected leak needs to be defensible. A complete, timestamped digital record of marking — showing that each answer was evaluated against the marking scheme by a named, credentialled evaluator — allows an examination body to demonstrate examination validity even when question paper security failed.

What OUHS and Affiliated Medical Colleges Must Do

OUHS's directive to increase examination security is a necessary signal. The following measures deserve priority:

Device-free examination halls with formal confiscation protocol: Every medical college conducting university examinations should have a documented device collection process that students and invigilators sign off on. Devices should be collected in numbered envelopes before paper distribution begins.

Encrypted, time-locked question paper delivery: Moving from sealed physical envelopes to encrypted digital question paper files that can only be decrypted by the presiding officer at the designated exam start time eliminates the transit and pre-distribution window that most breaches exploit.

Centralised CCTV for examination halls: Active camera coverage during the question paper distribution window and first thirty minutes of the examination creates a deterrence effect and a forensic record.

Digital evaluation of PG answer scripts: Scanning and digitally evaluating answer scripts ensures that post-breach audits are fast, granular, and credible. It also reduces the physical handling chain for answer books — a separate but related security exposure.

Formal whistleblower protection: The student who flagged this incident to authorities did exactly what examination integrity depends on. A formal, protected reporting channel — with assurance against retaliation — makes future early detection more likely.

A Broader Pattern

The Odisha incident joined a list of medical and health sciences paper leaks in India that has grown substantially in 2026. Gujarat Ayurved University faced an alleged BAMS third-year paper leak in July, with 11 of 12 questions reportedly matching a circulated set. Medical PG examinations across multiple states have faced similar incidents in recent years.

The pattern suggests that the examination security frameworks applied to PG health sciences examinations have not kept pace with the capabilities that smartphones and encrypted messaging platforms now give to anyone seeking to distribute a question paper. The solution requires both better upstream question paper security and better downstream evaluation audit capability — not one without the other.