Home Sections News Feature CID expands investigation into $2.5 million Treasury cyber fraud
News Feature

CID expands investigation into $2.5 million Treasury cyber fraud

Share
Share

By The Pulseline News Desk

The Criminal Investigation Department (CID) has intensified its investigation into the theft of US$2.5 million from the computer systems of the Department of External Resources, which operates under the Ministry of Finance.

As part of the ongoing probe, the CID has recorded statements from seven officials representing both the External Resources Department and the State Debt Management Office of the General Treasury. Several computers used by these officials have been taken into custody for detailed forensic analysis.

Investigators are working closely with the Sri Lanka Computer Emergency Readiness Team (SLCERT) to handle the technical aspects of the breach. The Australian Federal Police (AFP) has also agreed to assist under a bilateral agreement on combating cross-border financial crimes. Data and technical logs are being shared with Australian authorities to trace the stolen funds and identify those responsible.

Preliminary findings indicate that the funds, which were meant for an external debt repayment to an Australian creditor, were diverted after unauthorized access to the External Resources Department’s email system. The breach is reported to have occurred on September 7, 2025, but was only reported to the CID on April 21, 2026.

Following the incident, four senior officials from the Finance Ministry were suspended pending a disciplinary inquiry. These include two officials from the Public Debt Management Office and two from the External Resources Department, among them an Additional Director General, a Director, and an Assistant Director.

The case has triggered political criticism. Former minister Patali Champika Ranawaka accused President Anura Kumara Dissanayake (AKD), who is also in charge of finance, of failing to inform Parliament about the incident in a timely manner. He stated that Parliament should have been notified, as it has constitutional authority over public finances.

Meanwhile, the Free Lawyers Association has alleged irregularities in the internal investigation. Civil activist Keerthi Thennekoon claimed that documents related to the inquiry had been altered, raising concerns about transparency.

According to these claims, there were inconsistencies in official letters regarding the appointment of a Technical Investigation Committee in March 2026. It is also alleged that documents used as the basis for suspending officials were later changed.

The CID began its investigation at the Treasury on April 22, seizing computers, laptops, SIM cards, and mobile phones as evidence. The Deputy Minister of Finance has stated that authorities will also examine whether there was any political motive behind the fraud.

Investigations are ongoing as authorities attempt to determine how the breach occurred and who is responsible.

Author

Share

Leave a comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Articles
News Feature

Missing Finance Ministry files spark fears of new cyber fraud linked to Treasury breach

A fresh cybersecurity concern has emerged within Sri Lanka’s financial administration, with...

News Feature

Deputy Minister notes public sector inefficiencies

Deputy Minister of Industry and Entrepreneurship Development Chathuranga Abeysinghe has defended the...

News Feature

UNP condemns CID visit to RW’s residence amid ongoing probe

The United National Party (UNP) has condemned what it described as a...

News Feature

$2.5 million Treasury loss sparks alarm over Sri Lanka’s financial security systems

By The Pulseline News Desk A reported loss of $2.5 million (approximately...