Cargills Bank urges public to avoid sharing leaked data post-cyberattack

In an appeal to the public, Cargills Bank has called on individuals and organisations to refrain from sharing any leaked information tied to its recent cybersecurity breach, warning that doing so risks further harm to affected customers.

The bank’s latest regulatory filing, submitted to the Colombo Stock Exchange (CSE), emphasised that no financial systems or accounts were compromised, but stressed the ethical and legal risks of circulating unverified data.  

“Sharing such information only victimises those whose privacy has already been violated,” the bank stated, noting it had secured a preventive court order to block the dissemination of potentially exposed data. The legal measure, part of a broader strategy to protect stakeholders, underscores the bank’s efforts to hold perpetrators accountable and shield customers from secondary exploitation.  

The breach, first reported in March 2025, prompted collaboration with global cybersecurity experts and Sri Lanka’s Criminal Investigation Department (CID) to investigate the incident and reinforce digital defenses. While transactional systems and customer accounts remain secure, the bank acknowledged that non-core data may have been accessed.  

Cargills Bank reiterated its operational stability, confirming uninterrupted services across all branches and digital platforms. It also highlighted direct customer communications via email, social media, and its website to provide verified updates, urging the public to rely solely on official sources.  

“Cargills Bank remains fully committed to managing this incident with transparency, care, and responsibility. We continue to strengthen our systems in line with international best practices, working closely with cybersecurity experts and local regulatory authorities to ensure the highest levels of protection for our customers, employees, and stakeholders,” the statement read.

Further, the bank’s capital adequacy ratios and liquidity position remain robust, with no financial risk to customers.