Buy One Founder Summit Ticket, Get a Second for Free. Register now.
Founder Summit begins Nov. 4, 9:00 a.m. ET. Get your pass savings & deals before it starts. REGISTER HERE.
Sri Lanka said on Tuesday that a payment of about $625,000 (about 199.7 million Sri Lankan rupees) to the U.S. Postal Service has been missing for several weeks, after U.S. officials reported that the payment had failed to arrive, reports local media .
Authorities detected the incident after hackers allegedly tried to divert another payment intended for India.
Australian officials are reportedly aware of irregularities in payments owed to the country, suggesting that the Sri Lankan thefts could be broader than first thought.
The disclosure comes days after Sri Lankan officials said they were probing the theft of $2.5 million by a hacker who had targeted the country’s finance ministry.
Treasury Secretary Harshana Suriyapperuma told reporters at a press conference last week that the hackers diverted the payment from the country’s postal authority “to other bank accounts, instead of the intended recipient.”
These incidents seem to be business email compromise attacks, in which hackers break into email inboxes or other accounting systems to manipulate bank accounts and routing numbers during the process of paying an invoice.
Business email compromise scams are popular with cybercriminals, and recent FBI data has shown such attacks remain one of the top sources of cybercriminal profits, as hackers can steal vast sums of money via a single breach. The FBI says email compromise attacks resulted in billions in dollars of losses last year alone.
News of the successive security lapses has put new pressure on the Sri Lankan government after years of financial difficulties. The country is still recovering from an economic crisis that led to it defaulting on its debt in 2022, and resulted in months of protests that culminated in the ouster of then-president Gotabaya Rajapaksa.
It’s currently unclear if the two thefts are linked. Member of Parliament Nalinda Jayatissa said the government is investigating whether the incidents are connected.
When you purchase through links in our articles, we may earn a small commission . This doesn’t affect our editorial independence.
Zack Whittaker is the security editor at TechCrunch. He also authors the weekly cybersecurity newsletter, this week in security .
He can be reached via encrypted message at zackwhittaker.1337 on Signal. You can also contact him by email, or to verify outreach, at [email protected] .
Buy One Pass, Get a Second Free Cover more ground at TechCrunch’s ultimate founder bootcamp of the year by bringing your co-founder or partner for free Book before the BOGO deal expires
Claude can now analyze your spending with its new Personal Finance tool Aisha Malik
Data centers are turning to old jet engines as the wait for power grows Aditya Mehta
New York City’s Mamdani criticizes Madison Square Garden owner over surveillance tech Zack Whittaker
Y Combinator’s Garry Tan uses AI agents so much, he spends up to $200K a year on tokens Julie Bort
Anthropic warns that it’s very close to RSI capability, aka self-building AI Julie Bort
New York Times and other outlets sue web browser Brave over alleged content scraping Rebecca Bellan
Ninja’s first-ever microwave just replaced two of my kitchen appliances at once Lauren Forristal
Loading comments…