Sri Lanka Treasury Cyber Scare: Missing French Loan Files Raise Alarm After $2.5 Million Hack
Colombo -26-04-2026 Paris Telegraph Asia News
Sri Lanka’s financial system is under renewed scrutiny after sensitive digital documents tied to a future French loan repayment reportedly vanished from Ministry of Finance computer systems, deepening fears of a coordinated cyberattack targeting the nation’s Treasury.
According to emerging reports, the missing files are directly linked to a scheduled repayment agreement with France. Investigators suspect the disappearance may not be an isolated incident, but rather part of a broader and more sophisticated operation connected to the recent USD 2.5 million Treasury fund breach that shocked the country earlier this month.
Preliminary findings indicate that the compromised documents could have contained critical financial instructions or authorization data — raising concerns that cybercriminals may be preparing for another fraudulent transaction.
Authorities believe the same hacking group responsible for the earlier breach could be behind this latest development, suggesting an ongoing vulnerability within Sri Lanka’s financial infrastructure.
Cybercrime Probe Intensifies
A specialized cyberforensic unit from the Criminal Investigation Department (CID) has now taken charge of the investigation. The team is conducting deep digital analysis to trace unauthorized access and identify potential internal or external collaborators.
As part of the probe:
- Laptops used by key officials have been seized
- Mobile phones and SIM cards of Finance Ministry staff are under examination
- Particular focus is on personnel within the External Resources Department, which previously handled the controversial $2.5 million debt repayment transaction to Australia
Investigators are exploring whether insider access may have facilitated the breach, or if credentials were compromised through phishing or malware attacks.
Growing Concerns Over Financial Security
This latest incident has intensified concerns about the integrity of Sri Lanka’s public financial systems, especially as the country continues to navigate a fragile economic recovery.
Cybersecurity experts warn that missing repayment documents could be exploited to:
- Alter payment instructions
- Redirect funds
- Delay or disrupt international financial obligations
The involvement of a French loan has also drawn international attention, raising questions about the security of cross-border financial agreements and digital record-keeping.
A Pattern of Vulnerability?
This is not the first time Sri Lanka has faced financial cyber threats. However, the apparent link between the recent Treasury fund breach and the disappearance of critical loan documents suggests a potentially coordinated effort to exploit systemic weaknesses.
Officials have yet to confirm whether any financial loss has occurred in relation to the missing French loan files, but the situation remains under close monitoring.
Sri Lanka’s Finance Ministry has not issued a detailed public statement yet, but pressure is mounting for transparency and swift corrective action.
Paris Telegraph Asia News Desk
Paris Telegraph is an independent France-based digital news platform covering Paris news, French politics, European affairs, global business, diplomacy and artificial intelligence.
Publishing timely reporting and in-depth analysis, Paris Telegraph provides international perspectives on geopolitics, economic developments, technology innovation and cultural trends shaping Europe and the world.
As a growing online media outlet, Paris Telegraph is committed to credible journalism, global insight and forward-looking analysis for readers seeking reliable news from Paris and beyond.