Reply To:
Name - Reply Comment

When a cyber heist takes place the trust the public places in banks and institutions is severely effected
In an era of rapid social and technological change, legal systems and governance structures are under increasing pressure to evolve. Traditional frameworks, once considered sufficient, are now often inadequate to address the complexities of modern society.
This is particularly evident in two seemingly distinct yet fundamentally connected areas; the law on abetment of suicide and the recent cyber fraud scandal within Sri Lanka’s public finance system. Both highlight a deeper issue, whether institutions are adapting quickly enough to safeguard justice, accountability, and public trust.
Across societies, rising social and workplace pressures have contributed to an alarming increase in suicides. Alongside this trend is a growing number of cases involving the abetment of suicide. Existing legal provisions typically recognise abetment in three forms: instigation, aiding, and conspiracy.
However, real-life situations are rarely so clear-cut. There are many instances where individuals exert sustained psychological pressure or coercion that doesn’t neatly fall within these categories, yet still drives victims toward taking their own lives.
This gap in the law has allowed some accused persons to evade liability, exposing the limitations of a rigid legal framework. As society evolves, so does the methods by which harm is inflicted. Courts are increasingly confronted with cases that demand a more nuanced approach, one that considers the broader context and cumulative impact of actions rather than relying solely on narrowly defined categories. A flexible, fact-sensitive interpretation of the law is therefore essential to ensure that justice is not constrained by outdated definitions.
Law, accountability and crisis
In India, Abetment of Suicide is a serious criminal offence, punishable by up to 10 years in prison and a fine, involving instigation, conspiracy, or intentional aiding that drives someone to take their own life. Under Section 108 of the Bharatiya Nyaya Sanhita (BNS) (formerly Section 306 IPC), it requires “direct and alarming” provocation rather than just harassment. Expanding the legal definition of abetment would help address these gaps, ensuring the law reflects modern realities and better protects those at risk.
While these legal concerns persist, Sri Lanka is also confronting a crisis that exposes weaknesses in governance and institutional integrity. The revelation of a US Dollar ($) 2.5 million cyber fraud linked to a Treasury debt repayment has shaken confidence in the country’s already fragile public finance system. The issue has been further complicated by the death of a key official connected to the case, raising serious questions about accountability and transparency.
The incident involves a payment intended for an external creditor in Australia that was allegedly diverted due to a cyber-breach within the External Resources Department of the Ministry of Finance. In response, four senior officials from the department and the Public Debt Management Office have been suspended pending a disciplinary inquiry. However, these measures have done little to ease public concern.
Tensions intensified following the death of the Assistant Director of the External Resources Department of the Ministry of Finance, Ranga Rajapaksa, a suspended official. Believed to be a suicide, opposition speculates possible foul play or attempts to silence a key witness, especially as he had cooperated with investigators. There are also fears that responsibility for the fraud may now be shifted onto a deceased individual, undermining the investigation.
Regardless of the cause, the timing has deepened public mistrust and reinforced perceptions of systemic failure. Although the financial loss is significant, the broader implications for governance, credibility, and international confidence are far more serious.
As Sri Lanka navigates economic recovery and debt restructuring, such incidents raise concerns about internal controls and financial security. They also risk damaging trust among international creditors and partners, who depend on transparency and reliability in financial management.
Treasury Secretary Harshana Suriyapperuma has sought to contextualise the incident, explaining that authorities became aware of attempted cyber intrusions as early as January and took immediate steps to mitigate potential damage. According to him, coordination with foreign counterparts ensured that the intended recipient country was not adversely affected. However, subsequent internal reviews reportedly revealed that an earlier payment had indeed been compromised.
This explanation reflects a familiar pattern in bureaucratic crises. Officials tend to emphasise procedural responses and corrective actions, while critics focus on outcomes and accountability. Key questions remain unanswered: Was there negligence or human error? Were adequate safeguards in place? And why was the issue not disclosed more promptly?
The involvement of Australia as the intended recipient adds a diplomatic dimension to the situation. Although the response from Australian authorities has been measured, even restrained reactions carry weight in the realm of international finance. Sri Lanka can ill afford to strain relationships with bilateral partners, particularly at a time when external support is crucial for economic recovery.
The controversy has also drawn attention to broader issues of leadership and expertise within the Ministry of Finance. Historically, senior positions in the ministry were held by experienced administrators or central bankers with deep institutional knowledge. In recent years, however, there has been a shift toward appointing individuals from private sector or politically aligned backgrounds. Critics argue that while such appointments may bring fresh perspectives, they risk undermining the technical competence required to manage complex financial systems during periods of instability.
Comparisons have been made to the 2016 cyber heist involving the Bangladesh Central Bank, where hackers siphoned millions of dollars from foreign reserves. In that case, swift action helped recover a portion of the funds, and senior officials accepted responsibility, setting a precedent for accountability. Whether Sri Lanka will demonstrate a similar level of responsibility remains uncertain.
Ultimately, the current situation is a crisis that extends beyond numbers. The loss of US$ 2.5 million, while damaging, is overshadowed by the erosion of trust it represents. For citizens, it reflects a failure to safeguard public funds in an already strained economy. For international partners, it raises concerns about governance standards and risk management. For policymakers, it underscores the urgent need for reform, both in strengthening cyber security measures and in ensuring institutional accountability.
The human dimension of the crisis cannot be overlooked. The death of a key official highlights the immense pressures faced by individuals operating within high-stakes financial and administrative environments. It also complicates efforts to establish the truth, making transparency and thorough investigation all the more critical.
As Sri Lanka moves forward, it faces a defining moment. The challenges it confronts, whether in reforming outdated legal provisions on abetment or addressing systemic weaknesses in financial governance, are ultimately interconnected. Both require a commitment to adaptability, accountability, and justice.
The path ahead will depend on the government’s willingness to act decisively. Transparent investigations, timely disclosures, and meaningful reforms are essential to restoring public confidence. Without these, the risk is not only the persistence of individual crises, but the entrenchment of a broader perception of institutional fragility.
At this critical juncture, the nation watches closely, not just for answers, but for evidence that lessons will be learned and lasting change will follow.
(The author can be reached via [email protected])