Cargills Bank says no customer impact; pursuing legal action after cyber incident

Cargills Bank has confirmed that a cyber incident reported in March 2025 did not impact customer accounts or core banking systems and stated that it is now pursuing legal action to prevent the unlawful sharing of compromised data.   

In a statement released this week, the bank emphasized that operations remain fully functional and there is no financial risk to customers or banking transactions as a result of the breach.   

The bank disclosed that it is working closely with both local and international cybersecurity experts to investigate the incident, strengthen its cybersecurity framework, and implement additional protective measures.   

Upon discovering the breach, Cargills Bank promptly reported the matter to the Computer Crimes Division of the Criminal Investigation Department (CID) and is actively cooperating with law enforcement. It has also initiated legal proceedings to prevent the unlawful sharing of any compromised data and to protect the privacy of affected individuals.   

“This step was taken solely to uphold the privacy and security of those affected,” the statement noted, urging the public not to share any customer information that may have been obtained unlawfully.   

Cargills Bank has made a series of public disclosures regarding the incident through the Colombo Stock Exchange, its official website, and social media platforms. The bank has also been directly informing any impacted customers and assuring them of the measures being taken to safeguard their data.  “All banking channels continue to operate without disruption. The systems responsible for processing and safeguarding banking activities remain fully secure,” the bank said.   

In addition, the bank reassured stakeholders that its financial and liquidity position remains strong, with capital adequacy ratios well above regulatory requirements.   As the investigation continues, Cargills Bank says it will continue to issue verified updates and take all necessary steps to protect customer information and uphold operational integrity.