Daily Mirror - Print Edition

$2.5 Million treasury heist: CID grills seven officials

27 Apr 2026 - {{hitsCtrl.values.hits}}      

  • Investigators are working closely with the Sri Lanka Computer Emergency Readiness Team (SLCERT) to navigate the technical complexities of the breach
  • Data and technical logs are currently being shared with Australian authorities to track the movement of the stolen funds and pinpoint the location of the perpetrators

By Darshana Sanjeewa Balasuriya 


The Criminal Investigation Department (CID) has intensified its probe into the theft of US 2.5 million from the computer systems of the Department of External Resources, which operates under the Ministry of Finance.   
As part of the ongoing investigation, the CID recorded formal statements from seven officials. Police said these individuals represent both the Department of External Resources and the State Debt Management Office of the General Treasury.   
To assist with digital evidence gathering, the CID has taken several computers used by these officials into custody for comprehensive forensic analysis.   
Police said that investigators are working closely with the Sri Lanka Computer Emergency Readiness Team (SLCERT) to navigate the technical complexities of the breach.   
It was reported that the Australian Federal Police (AFP) has also agreed to support the investigation. This partnership is facilitated by a Memorandum of Understanding (MoU) signed between the two countries last year to combat cross-border financial crimes.   
Data and technical logs are currently being shared with Australian authorities to track the movement of the stolen funds and pinpoint the location of the perpetrators.   
Earlier, the Government has suspended four senior officials of the Ministry of Finance – two from the Public Debt Management Office (PDMO) and two from the External Resources Department (ERD) – pending a disciplinary inquiry into a cyber fraud that resulted in the diversion of $ 2.5 million.   
The suspended officials include one Additional Director General and one Director from the PDMO, as well as one Director and one Assistant Director from the External Resources Department.   
The funds had been allocated for an external debt repayment to an Australian creditor. According to preliminary findings, the payment had been redirected after unauthorised access had been gained to the email system of the ERD.