BackECONOMY
Sri Lanka Finance Ministry confirms USD 2.5 million loss due to hacking
Sri Lanka said USD 2.5 million lost to hacking of the Finance Ministry's payment system, part of a USD 22.9 million payment due to a creditor. The disclosure followed opposition allegations, an investigation launched by a high-powered committee, and international involvement.
Why It Matters
The incident underscores cybersecurity risks in public financial transactions and has prompted cross-border coordination and scrutiny of government payments.
Timeline
7 Events
April 23, 2026: Australian High Commission comments on irregularities
April 23, 2026
The Australian High Commission stated that both the High Commission and the Finance Ministry were aware of irregularities in payments owed to Australia and that authorities were coordinating with Australian officials.
April 23, 2026: Ministry confirms loss and committee appointed
April 23, 2026
Secretary to the Ministry of Finance Harshana Suriyapperuma confirmed USD 2.5 million loss due to hacking and said a high-powered committee had been appointed to investigate the incident.
April 22, 2026: Opposition alleges funds went to hacker
April 22, 2026
A group of opposition lawyers wrote to the Speaker alleging that USD 2.5 million had landed in a hacker's account and not in the correct creditor's account.
January 31, 2026: USD 2.5 million payment completed
January 31, 2026
USD 2.5 million had been paid by January 31, 2026.
January 2026: Awareness of hacking attempts
January 2026
In January 2026, the Finance Ministry learned that cyber criminals were attempting to enter the External Resources Department's system; authorities coordinated with foreign countries to mitigate risk.
December 2025: USD 2.5 million paid (partial) as part of the USD 22.9 million
December 2025
USD 2.5 million, part of that payment, was paid between December 2025 and January 31, 2026.
September 2025: USD 22.9 million due to creditor
September 2025
Sri Lanka was due to pay USD 22.9 million to a creditor.