Sri Lanka reports over $3 million lost in separate cybersecurity incidents
Sri Lankan government discloses multiple cyberattacks resulting in more than $3 million in losses as country recovers from 2022 debt crisis.

The Sri Lankan government has reported losing more than $3 million in two separate cybersecurity incidents, adding to the financial challenges facing the island nation as it continues recovering from its 2022 debt crisis.
The latest disclosure comes just days after hackers successfully stole $2.5 million from the country's finance ministry in a cyberattack. The government has now revealed details of an additional incident that resulted in further financial losses, though specific details about the second attack were not immediately provided.
The timing of these cybersecurity breaches is particularly concerning for Sri Lanka, which declared bankruptcy in 2022 and has been working to stabilize its economy through international assistance and debt restructuring efforts. The country faced severe shortages of fuel, food, and medicine during the height of its economic crisis, leading to widespread protests and political upheaval.
Cybersecurity experts have noted that developing nations often face particular vulnerabilities to such attacks due to limited resources for digital infrastructure protection. The incidents highlight ongoing challenges for governments worldwide in protecting critical financial systems from increasingly sophisticated cyber threats.
Sri Lankan authorities have not yet disclosed whether they have identified the perpetrators of either attack or provided details about efforts to recover the stolen funds. The government has also not indicated what additional security measures are being implemented to prevent future incidents.