Sri Lankan Finance Ministry Hit by $3.7 Million Cyber Heist Targeting Debt Payments The Sri Lankan government has confirmed a cyber attack on its Finance Ministry, resulting in the theft of over $3.7 million the largest sum ever stolen by hackers from a Sri Lankan state institution. The funds, earmarked for debt repayments to Australia, were diverted after attackers breached the ministry’s email servers and computer systems. Australian High Commissioner to Sri Lanka, Matthew Duckworth, acknowledged the incident, stating that both governments were aware of "irregularities" in the payments. While Sri Lankan authorities have not disclosed the nature of the attack or identified the perpetrators, Finance Ministry Secretary Harshana Suriyapperuma revealed that hackers altered payment details to redirect the funds. The Criminal Investigation Department (CID) and the Financial Intelligence Unit of the Central Bank of Sri Lanka have been notified, and a formal investigation led by a committee including two deputy Treasury secretaries has been launched. The breach was discovered after officials detected unauthorized access to the ministry’s email servers. Sri Lanka, still recovering from its 2022 economic crisis and default on $46 billion in external debt, remains under scrutiny as authorities work with Australian officials to trace the stolen funds. Australia has reaffirmed its commitment to supporting Sri Lanka’s debt sustainability efforts amid the ongoing probe.