Sri Lanka Cargills Bank hit by ransomware attack, data breach
Learn More
Sri Lanka based Cargills Bank PLC is strengthening its cybersecurity infrastructure following a data breach that occurred on March 20, 2025. The bank has engaged leading international cybersecurity specialists to assist with its response and recovery efforts after what is being described as one of Sri Lanka's most substantial data breaches.
Cargills Bank has isolated the affected systems and has assured customers that its core banking operations remain intact and fully functional, allowing transactions to continue without disruption.
The ransomware group Hunters International has claimed responsibility for the attack. Apparently, approximately 1.9 terabytes of customer and staff data were compromised, containing 1,137,008 files in total. The exposed data includes:
- National Identity Card (NIC) numbers
- Passport details
- Specimen signatures of staff
- Additional personal and financial information
The number of affected individuals is not disclosed. The bank has notified regulatory and law enforcement authorities about the breach and is cooperating fully with ongoing investigations.
