Major Cyberattack on Sri Lanka’s Finance Ministry; $2.5 Million Stolen
A major cyberattack has targeted Sri Lanka’s Finance Ministry, with hackers reportedly stealing $2.5 million, marking the largest cyber-related financial theft from a state institution in the country.
The breach specifically affected the Public Debt Management Office (PDMO). Authorities initially detected suspicious activity involving the ministry’s email system, which led to a deeper investigation. It was then discovered that the stolen funds were part of a scheduled debt repayment to Australia.
Finance Ministry Secretary Harshana Suriyapperuma confirmed the incident, stating that four senior PDMO officials have been suspended following the breach.
Ongoing Investigations & International Support
The Criminal Investigation Department is currently leading investigations, while Sri Lankan authorities have also sought assistance from international law enforcement agencies.
Australia has extended support, with High Commissioner Matthew Duckworth confirming that irregularities in the payment were identified and that Australian officials are cooperating with Sri Lankan investigators.
Background & Economic Context
The cyberattack comes at a critical time as Sri Lanka continues to recover from its 2022 economic crisis, during which the country defaulted on approximately $46 billion in external debt.
The PDMO itself is a recently established institution, created as part of reforms linked to a $2.9 billion bailout program supported by the International Monetary Fund.
Ironically, the attack follows recent public awareness campaigns by authorities warning citizens about cyber fraud—highlighting vulnerabilities even within state systems.
