Probe Intensifies into $2.5 Million Cyber Heist Targeting Finance Ministry Systems
By: Isuru Parakrama
April 27, Colombo (LNW): Authorities have launched an extensive investigation into the destination of US $2.5 million that was illicitly diverted following a cyber intrusion into the Finance Ministry’s digital infrastructure, Public Security Minister Ananda Wijepala confirmed.
The breach, which has raised serious concerns about the resilience of government IT systems, came to light after claims by a group known as “Free Lawyers”. Subsequently, the Finance Ministry acknowledged that funds earmarked for a debt repayment to an Australian creditor had been intercepted and misdirected by hackers.
Officials say a coordinated inquiry is now underway, involving several key agencies including the Criminal Investigation Department (CID) and the Central Bank. The Financial Intelligence Unit (FIU) of the Central Bank has been tasked with tracing the account that ultimately received the missing funds, acting on a formal request from the CID.
Minister Wijepala noted that investigations remain at an early stage, adding that while the involvement of the Australian Federal Police (AFP) has been discussed, no visiting delegation has yet been requested. He indicated, however, that such assistance could be sought if the inquiry demands it.
Meanwhile, the CID has stepped up its efforts, focusing closely on the Department of External Resources, which operates under the Finance Ministry. Investigators have already recorded statements from seven officials connected to both the External Resources Department and the State Debt Management Office within the General Treasury.
As part of the forensic process, several computers used by these officials have been seized and are undergoing detailed examination. Law enforcement authorities are also working alongside the Sri Lanka Computer Emergency Readiness Team (SLCERT) to analyse technical data and unravel the methods used in the cyberattack.
In a sign of growing international cooperation, Australian authorities have agreed to assist the probe under an existing memorandum of understanding between the two countries aimed at tackling cross-border financial crime.
Technical information and transaction data are currently being exchanged to help track the movement of the stolen funds and identify those responsible.
In a parallel administrative move, four senior officials from the Finance Ministry have been suspended pending disciplinary proceedings. Those affected include two officials from the Public Debt Management Office and two from the External Resources Department, among them individuals holding senior directorial positions.
Preliminary findings are said to be suggesting that the breach originated from unauthorised access to the email system of the External Resources Department, enabling the attackers to reroute the payment before it reached its intended recipient.
The incident has prompted renewed scrutiny over cybersecurity practices within critical government institutions, with calls for tighter safeguards and more robust monitoring systems to prevent similar breaches in future.
The post Probe Intensifies into $2.5 Million Cyber Heist Targeting Finance Ministry Systems appeared first on LNW Lanka News Web.
