Sri Lanka Hit by Second Cyber Theft, $3M Lost in Weeks

Sri Lanka's government has disclosed a second major cybersecurity breach, bringing total losses to over $3 million in recent weeks. The incidents occur as the island nation continues recovering from its severe 2022 debt crisis.

Sri Lanka's finance ministry has confirmed another significant cyber theft, marking the second major incident within days. The initial breach resulted in hackers stealing $2.5 million from government accounts, and the newly disclosed incident adds further losses to the country's troubled finances.

The successive attacks underscore growing vulnerabilities in Sri Lanka's digital infrastructure at a critical juncture. The nation is still stabilizing following its 2022 debt crisis, which left the economy deeply fractured and foreign currency reserves severely depleted. These cybersecurity failures come at a particularly inopportune moment, as the government attempts to rebuild fiscal stability and restore international confidence in its financial management.

Authorities have not yet provided comprehensive details about the second breach or confirmed the exact amount lost in that incident. The timing and nature of both attacks suggest potential coordination, though investigations are ongoing. Government officials have pledged enhanced cybersecurity measures and greater transparency regarding future incidents.

The breaches raise serious questions about the security protocols protecting Sri Lanka's financial systems during an economically vulnerable period. The loss of funds through cyberattacks rather than legitimate government spending makes recovery efforts more difficult and compounds the nation's credibility issues with international financial institutions and investors.