Colombo : Sri Lanka has confirmed a serious cybersecurity breach in which $2.5 million (over ₹20 crore) was siphoned off from a government account through a sophisticated cyberattack. The amount was part of a foreign debt repayment transaction intended for Australia, but was diverted by hackers into an unauthorised account.
According to government officials, the incident involved a breach of the Ministry of Finance’s External Resources Department. Cyber attackers reportedly infiltrated the system and manipulated the digital payment process, resulting in the misdirection of funds.
Preliminary investigations suggest that the attack was highly coordinated, targeting vulnerabilities in the government’s financial transaction system. Authorities have acknowledged a significant lapse in cybersecurity protocols that allowed the breach to occur.
In response, the Sri Lankan government has appointed a high-level investigative committee to probe the incident. The Cyber Crimes Investigation Unit and the Financial Intelligence Unit of the Central Bank have also been roped in to assist the investigation. Several officials are being questioned, and a few have been suspended pending inquiry.
The government has stated that efforts are underway to trace and recover the stolen funds, with international agencies being contacted for assistance.
The incident comes at a time when Sri Lanka is still recovering from a severe economic crisis. Experts warn that the breach highlights critical weaknesses in the country’s digital financial infrastructure and underscores the urgent need for stronger cybersecurity measures.