:

SRI LANKA INVESTIGATES $2.5M FINANCE MINISTRY HACK

SECURITY DESK1 MIN READ
THU, APR 23, 2026

■ AI-SUMMARIZED FROM 1 SOURCE BELOW

Sri Lanka's government is investigating a cyberattack that resulted in the theft of $2.5 million from the Finance Ministry's systems. Treasury Secretary Harshana Suriyapperuma confirmed the breach on Thursday.

The hack represents a significant security incident for Sri Lanka's financial infrastructure. Attackers gained unauthorized access to the Finance Ministry's computer systems and successfully extracted the funds. Treasury Secretary Suriyapperuma disclosed the breach, indicating that authorities have launched a formal investigation into the incident. Details regarding the attack method, timeline, and the specific vulnerabilities exploited remain under investigation. The incident highlights growing cybersecurity risks facing government institutions in the region. Sri Lanka joins numerous countries grappling with sophisticated cyber threats targeting public sector financial systems. No additional details about recovery efforts or potential attribution have been released. The investigation is ongoing.

■ SOURCES

Bloomberg Tech

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Apple has patched a vulnerability that retained Signal message data even after users deleted the app, potentially allowing law enforcement to access private communications. Signal confirmed the fix resolves the security issue.

JUST NOWIndustry Desk

Half a million confidential health records from UK Biobank participants were advertised for sale on Chinese e-commerce site Alibaba last week. The UK government has confirmed the listings and says the data has been removed with no evidence of sales.

JUST NOWIndustry Desk

The Trump administration says it has evidence of large-scale industrial distillation campaigns by Chinese actors targeting American AI models. The government is now moving to counter the threat.

JUST NOWAI Desk

Attackers compromised Bitwarden's command-line interface as part of an ongoing campaign targeting Checkmarx users. The malicious code was injected into the package repository, affecting developers using the tool.

1H AGOAI Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.