The Department of Pensions has reportedly been targeted by the Cloak ransomware group, according to cybersecurity monitoring platform FalconFeeds.io.
The scope of the breach, including whether any data was compromised or a ransom demanded, has not yet been confirmed.
While an internal investigation is reportedly underway, the Department of Pensions has not publicly acknowledged any cybersecurity incident.
Cybersecurity analyst Asela Waidyalankara has urged authorities to take swift action following the latest threat, noting that the same monitoring platform (FalconFeeds.io) had previously flagged a data breach involving Cargills Bank in March 2025.
The Cloak ransomware group, identified in this instance, is known for encrypting sensitive data and extorting victims by demanding ransom payments for decryption keys and the non-disclosure of stolen information. (Newswire)
🚨 Cloak Ransomware Alert 🚨
Department of Pensions 🇱🇰
The Department of Pensions in Sri Lanka is a government agency responsible for managing pension schemes for public sector employees, has fallen victim to Cloak Ransomware.
Initially, on April 02, 2025, the group posted… pic.twitter.com/LnEvbV6zjR
— FalconFeeds.io (@FalconFeedsio) May 27, 2025
