Incidents in country:
3 incidents catalogued
Sri Lanka's Ministry of Finance confirmed that attackers who infiltrated the External Resources Department's systems and intercepted email about a government-to-government debt repayment altered payment details and diverted about $2.5 million owed to Australia.
A ransomware attack on Sri Lanka's Lanka Government Cloud encrypted around 5,000 gov.lk email accounts — including the Cabinet Office — and, because backups were also encrypted, permanently destroyed roughly three months of government email.
Hacktivists hijacked Sri Lanka's national domain registry and redirected around ten high-profile .lk domains — including Google.lk and Oracle.lk — to a political propaganda page, exploiting admin credentials that had been exposed on the dark web since 2012.