Cyber thieves steal $3.7m from Sri Lankan funds meant for Australian debt repayment

Sri Lanka's government has confirmed a significant cyber breach of its finance ministry, with hackers stealing more than $3.7 million that was earmarked to repay debts owed to Australia. The theft represents the largest amount ever stolen from a state institution in Sri Lanka through a cyber attack, dealing a serious blow to the island nation's already precarious financial position.

Finance Ministry Secretary Harshana Suriyapperuma disclosed that authorities discovered the breach after criminals infiltrated the department's computer system and email servers. The missing funds, which were designated specifically for debt servicing to Australia, vanished during the intrusion.

Investigation underway with Australian assistance

Sri Lankan criminal investigators are leading the inquiry into the breach, with authorities seeking support from Australian law enforcement agencies to conduct a comprehensive investigation. Officials have remained tight-lipped about further details at this stage, citing the ongoing nature of the criminal probe.

"Criminal investigators are looking into this and we are not in a position to give further details," Mr Suriyapperuma stated.

Mounting pressure on debt-ridden nation

The theft adds to mounting pressures facing Sri Lanka, which has grappled with severe debt obligations in recent years. The country's financial difficulties have necessitated multiple bilateral arrangements with creditor nations, including Australia, to service outstanding obligations.

The breach highlights the vulnerability of critical financial infrastructure in developing economies and raises questions about cybersecurity protocols within Sri Lanka's government finance operations. The timing of the theft—coinciding with a scheduled payment to Australia—suggests the criminal actors had detailed knowledge of the ministry's financial transaction systems.

Broader implications for regional security

This incident reflects growing concerns about organised cyber crime targeting government institutions across the Indo-Pacific region. Australia, as both a creditor nation and a regional security partner, has a vested interest in assisting Sri Lanka's investigation and strengthening its financial system defences.

The involvement of Australian law enforcement indicates official recognition of the transnational nature of the crime and the importance of bilateral cooperation in pursuing cyber criminals operating across borders.

• The stolen amount exceeds $3.7 million AUD
• Funds were designated for Australian debt repayment
• The breach compromised both computer systems and email servers
• Australian authorities are assisting in the investigation
• It marks the largest cyber theft from a Sri Lankan state institution

This article is based on reporting from ABC News.