Cyber Security News

Massive Ransomware Attack on SriLanka Wipes Out Months of Data

The Information and Communication Technology Agency (ICTA) has officially confirmed a severe data loss incident that has had a far-reaching impact on all government offices using the “gov.lk” email domain.

The Information and Communication Technology Agency is the lead agency in Sri Lanka for implementing information and communications technology initiatives by the Government of Sri Lanka. 

It was established to develop the economy of Sri Lanka through ICT.

The Director for Strategic Communications at ICTA issued a notice confirming the unfortunate incident, which affected several government offices relying on the “gov.lk” email domain, including the Cabinet Office. 

Ransomware Attack Notice

The data loss is believed to have been caused by a large-scale ransomware attack that occurred between May 17th and August 26th.

Approximately 5,000 email addresses fell victim to this ransomware attack, according to ICTA’s report. 

What makes this situation even more distressing is the revelation that there was neither an offline nor an online backup system in place for a critical period of two months. 

As a result, several emails lost due to the attack are now deemed irrecoverable.

In response to this alarming incident, ICTA has taken immediate action. 

They have decided to implement a daily offline backup process to prevent such devastating data losses in the future. 

The relevant application processes will also be upgraded to the latest versions, bolstering defenses against virus attacks to enhance the overall cybersecurity infrastructure.

Efforts to recover the lost data are currently underway, with both ICTA and the Sri Lanka Computer Emergency Readiness Team (SLCERT) working diligently to address the aftermath of this ransomware attack.

Meanwhile, SLCERT has issued a public warning about a phishing scam that specifically targets Sri Lankan nationals.

Ransomware Attack Notice

Keep informed about the latest Cyber Security News by following us on Google NewsLinkedinTwitter, and Facebook.

Guru Baran

Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments.

Recent Posts

Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…

3 hours ago

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

Hackers are making some phishing pages harder to track by changing the code delivered to…

3 hours ago

Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days

A cyber incident reportedly forced a British power plant to halt operations for about four…

4 hours ago

Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets

Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…

4 hours ago

Ransomware Gang Claims AI Can Analyze 700GB of Stolen Data Every Hour

TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…

4 hours ago

Hackers Compromise Hundreds of WordPress Sites to Deploy Amatera Stealer via ClickFix

A fake student resume is being used to place a remote-access tool on researchers’ Windows…

6 hours ago