CID and Financial Intelligence Unit launch probe into cyber theft during foreign currency payment: Ministry files complaint with relevant authorities

A specialised investigation into a theft carried out by cyber hackers who accessed the computer systems of the Department of Foreign Resources under the Ministry of Finance, Planning, and Economic Development is currently underway.

The Ministry announced that the breach came to light during a foreign currency payment processed in January 2026.

Formal complaints reached the Sri Lanka Computer Emergency Response Team (SLCERT), the Computer Crime Investigation Division of the Sri Lanka Police, the Criminal Investigation Department (CID), and the Financial Intelligence Unit of the Central Bank.

Following an initial internal inquiry, the Ministry initiated disciplinary action against several officers.

Law enforcement agencies received all necessary assistance and information to facilitate the probe, which will involve international coordination in accordance with existing agreements between Sri Lanka and foreign nations.

Meanwhile, the 'Free Lawyers' organisation sent a letter to the Speaker of Parliament requesting an investigation into whether $2.5 million from the General Treasury fell into the hands of hackers.

The organisation, led by President’s Counsel Maithri Gunaratne, claimed the Treasury attempted to settle part of a $22.9 million debt owed by the Sri Lankan government by late September 2025.

This payment, totaling $2.5 million, occurred between December 2025 and January 31, 2026.

The letter alleges that instead of reaching the intended creditor, the funds went to a third-party hacker.

It further noted that a technical investigation committee is active and authorities suspended two Deputy Directors, two Directors, and the head of the IT division at the Treasury in connection with the incident.