State Superintendent Carey Wright says Minnesota-based Questar Assessment believes an unauthorized user gained access to records from 2016 tests at Tupelo Middle School, Tupelo High School and Jefferson County Junior High on Dec. 31 or Jan. 1.