Sri Lanka Confirms Hackers Diverted USD 2.5M Meant for Australian Debt Repayment

Sri Lanka’s Ministry of Finance has revealed that cyber hackers infiltrated the computer system of the External Resources Department, leading to the fraudulent diversion of a foreign debt repayment of nearly USD 2.5 million intended for Australia.

Addressing the issue, Dr. Harshana Suriyapperuma, Secretary to the Ministry of Finance, said the intrusion was first detected in January 2026, when officials became aware that hackers had attempted to gain unauthorized access to the External Resources Department’s systems and compromise them. Upon identifying the threat, the Ministry immediately alerted law‑enforcement authorities.

He said reports were lodged with the Sri Lanka Computer Emergency Readiness Team (SL‑CERT) and the Computer Crimes Investigation Division of the Sri Lanka Police to investigate the attempted system breach. In parallel, ministry officials instructed the External Resources Department to conduct an internal review to determine whether any further damage had occurred beyond the initial incident.

Subsequent investigations revealed that the cyberattack had taken place earlier than first detected. A review of previous months’ transactions uncovered that hackers had intercepted email communications linked to a government‑to‑government debt repayment involving Australia.