Listen to the article
Cyberattack on Finance Ministry: False Claims Circulate as Investigation Continues
A recent cyberattack on Sri Lanka’s Ministry of Finance has captured national attention after hackers allegedly diverted USD 2.5 million intended for an Australian creditor. As authorities work to recover the funds, a wave of misinformation has flooded social media platforms, falsely attributing inflammatory statements to government officials.
The Ministry of Finance confirmed it has filed complaints with law enforcement regarding the cyber intrusion targeting the Department of Foreign Resources. According to ministry officials, preliminary investigations revealed that hackers intercepted email communications between the Treasury and an Australian export finance company, altering account details to divert funds to unauthorized accounts.
Deputy Minister of Finance Dr. Anil Jayantha Fernando explained that the hackers compromised the email system used for financial settlements, successfully redirecting the Australian payment and attempting a similar scheme with funds designated for India. The Treasury reportedly detected suspicious account number changes in the second attempt and immediately alerted the Computer Crime Investigation Division and the Sri Lanka Computer Emergency Readiness Team.
“As a result, it was determined that the funds owed to the Australian Export Finance Corporation had been diverted into accounts controlled by the hackers,” Dr. Fernando stated at a press briefing. “An immediate complaint was lodged with the Criminal Investigation Department, and a formal investigation is currently underway.”
Secretary to the Ministry of Finance Dr. Harshana Suriyapperuma confirmed that the government has enlisted both local and international experts to track down the perpetrators and recover the stolen funds. An official committee comprising two Deputy Secretaries of the Treasury has been established to conduct an internal investigation, and disciplinary action has already been initiated against several officials.
The Australian High Commission in Sri Lanka acknowledged the situation in a statement on its social media accounts, noting that both Sri Lankan and Australian authorities are cooperating on the investigation. “Australia remains committed to supporting Sri Lanka’s return to debt sustainability,” the statement read.
Meanwhile, opposition parties have raised concerns about the government’s ability to protect the country’s financial systems, questioning whether responsible officials should resign and who should bear the financial burden of the loss.
Amid the legitimate concerns, fact-checkers have identified numerous fabricated social media posts falsely attributing statements to President Ranil Wickremesinghe, Minister Bimal Ratnayake, and Deputy Minister Chathuranga Abeysinghe regarding the incident.
One widely shared fake post claimed that President Wickremesinghe stated, “We have the cheque numbers from which the Australian hacker who stole USD 2.5 million from us provided USD 2 million to Mahinda Rajapaksa.” The Presidential Media Division confirmed no such statement was ever made.
Another fabricated post attributed to Deputy Minister Abeysinghe suggested the government had “strengthened its cybersecurity systems” yet somehow allowed “even such a small amount of money” to be stolen. A separate false post claimed the deputy minister had accused “Chinese hackers supported by the Rajapaksa family” of the theft.
Abeysinghe directly refuted these claims on his official Facebook page, stating that the circulating content attributed to him is “entirely false.” His media secretary confirmed the deputy minister has never made any such statements.
Similarly, a post claiming Minister Bimal Ratnayake suggested Rohitha Rajapaksa’s involvement in the incident and an impending Criminal Investigation Department summons was confirmed as false by the minister’s media secretary.
The Free Lawyers organization was among the first to publicly highlight concerns about the misdirected payment, bringing significant national attention to the issue. According to government sources, the funds were part of a larger USD 22.9 million debt obligation due by September 2025.
As investigations continue, the Ministry of Finance has stated it will release additional information at an appropriate time to avoid impeding the ongoing proceedings. The incident has raised serious questions about cybersecurity vulnerabilities in Sri Lanka’s financial systems at a time when the country is working to stabilize its economy following a severe financial crisis.
Fact Checker
Verify the accuracy of this article using The Disinformation Commission analysis and real-time sources.
9 Comments
Cybersecurity is a growing challenge for governments worldwide. This case highlights the need for advanced protective measures and vigilance against sophisticated hacking attempts targeting sensitive financial systems. Robust digital safeguards and regular security audits should be priorities.
While the details are still emerging, it’s worrying to see false claims and misinformation circulating about this incident. I hope the government is able to recover the funds and that the perpetrators are swiftly identified and held accountable through the legal process.
Cyberattacks on government finances are a serious threat that requires robust countermeasures. I hope the Sri Lankan authorities are able to recover the stolen funds and implement stronger security protocols to safeguard the country’s financial systems going forward.
Absolutely. Cybersecurity should be a top priority for governments to protect critical infrastructure and public resources from malicious actors.
Allegations of fund diversion by government officials are always concerning. However, it’s important to rely on official sources and avoid spreading unverified claims, which can undermine public confidence. A thorough, transparent investigation is crucial to uncover the truth and prevent future breaches.
I agree, maintaining public trust is key. Authorities must handle this matter carefully and communicate the facts clearly to the public.
While the details are still emerging, it’s important to avoid speculation and wait for the official investigation to uncover the facts. Maintaining transparency and accountability will be crucial in restoring public confidence in the government’s ability to safeguard public finances.
Cyberattacks targeting government finances are very concerning. It’s crucial that Sri Lankan authorities thoroughly investigate this alleged theft and take strong measures to improve cybersecurity and prevent future incidents. Robust financial controls and transparency are essential to maintain public trust.
This incident highlights the ongoing challenges governments face in securing their digital assets against sophisticated cyber threats. Strengthening cybersecurity defenses and fostering a culture of vigilance should be a high-priority agenda for policymakers.