According to an official statement, the breach was identified after suspicious foreign currency payments were detected in January 2026. Upon uncovering these irregularities, the Ministry promptly notified the Sri Lanka Computer Emergency Readiness Team (SL-CERT) and the Sri Lanka Police’s Computer Crime Investigation Division (CCID).
Subsequent investigations led to a formal complaint being filed with the Criminal Investigation Department (CID). The Financial Intelligence Unit (FIU) of the Central Bank of Sri Lanka has also been informed and is reportedly involved in the ongoing inquiry.
The Ministry confirmed that an internal preliminary investigation has already been conducted. As a result, disciplinary action has been taken against several believed to be connected to the incident.
Officials stated that the Ministry is fully cooperating with all relevant authorities, providing necessary information and support to facilitate a comprehensive investigation.
Due to the sensitive nature of the ongoing inquiries, further details have not yet been disclosed. Authorities emphasized that updates will be shared at an appropriate time, ensuring that investigative processes are not compromised.
The Ministry also noted that future actions related to this incident will be carried out in accordance with existing agreements and cooperation frameworks between Sri Lanka and foreign governments.
Investigations are currently underway.
