Cyber criminals hacked into the Sri Lankan finance ministry’s computer system and siphoned off US$2.5 million, the government said on Thursday (Apr 23), the largest amount of cash ever stolen by hackers from a state institution in the debt-saddled country.
The cyberattack is a major blow to Sri Lanka, which is recovering from a crippling economic crisis in 2022 after Colombo defaulted on its US$46 billion external debt.
The money was destined for debt repayment to Australia, finance ministry secretary Harshana Suriyapperuma told reporters in the capital.
Four senior officers at the Public Debt Management Office (PDMO) were suspended after the breach, he said.
Authorities were alerted to an attempt to break into the ministry’s e-mail server, and investigations showed that a US$2.5 million payment owed to Australia had disappeared.
“Criminal investigators are looking into this, and we are not in a position to give further details,” Suriyapperuma said, adding that Sri Lankan authorities were seeking help from foreign law enforcement agencies.
Sri Lanka established the PDMO earlier this year in line with an International Monetary Fund-backed US$2.9 billion bailout loan from early 2023, following the island’s economic meltdown.
Australia’s High Commissioner in Sri Lanka, Matthew Duckworth, said Canberra was aware of “irregularities” in payments owed to it.