Sri Lanka's Cybersecurity Battle: $2.5 Million Lost to Hackers

Sri Lanka is investigating a cyber hacking incident where USD 2.5 million meant for a creditor was redirected to a hacker's account. The Finance Ministry is coordinating with foreign entities to resolve the issue, while a high-powered committee and various legislative bodies are probing the matter.

Sri Lanka is on a quest to recover USD 2.5 million lost through a cyber attack on the Finance Ministry's payment system, confirmed by the ministry's top bureaucrat on Thursday. Harshana Suriyapperuma, the Secretary to the Ministry, clarified this following allegations by the opposition regarding diverted treasury funds.

The cyber incident reportedly occurred via email early in 2026. Suriyapperuma noted that proactive measures were taken with foreign countries to safeguard against any further damage. An official committee is now investigating the mishap, which affected a payment intended for a creditor in September 2025, partially disbursed by January 31, 2026.

Calls for accountability are growing, with opposition lawyers urging the Parliament Speaker to begin an inquiry into these misplaced funds, underscoring the legislative duty over public finances. The Australian High Commission stated that they are involved with the Finance Ministry in addressing payment discrepancies involving the Australian government.