The Department of Pensions has confirmed that a recent cyberattack targeting its IT infrastructure has not resulted in data loss or a disruption to services, stating that system functions have since been restored, based on current observations.

In an official statement, Director General Chaminda Hettiarachchi assured that the department’s operations remain unaffected and that the implementation of pension revisions announced in the 2025 Budget continues without interruption.

The department noted that it immediately alerted the Sri Lanka Computer Emergency Readiness Team (SLCERT) upon detecting the incident, prompting a swift investigation and the initiation of measures to strengthen cybersecurity defenses. Additional steps have been taken to secure sensitive data handled by the department, the statement said.

While SLCERT continues to investigate the incident, the Department of Pensions said it will notify its service recipients accordingly.

Cybersecurity monitoring platform FalconFeeds.io has attributed the attack to the Cloak ransomware group, a known cybercriminal outfit that typically encrypts sensitive data and demands ransom payments for its release or non-disclosure.

Cybersecurity experts called for urgent action, pointing out that FalconFeeds.io had earlier flagged a data breach involving Cargills Bank in March 2025. (Newswire)

The post Cyber attack : Pension Dept issues clarification appeared first on Newswire.

The Department of Pensions has reportedly been targeted by the Cloak ransomware group, according to cybersecurity monitoring platform FalconFeeds.io.

The scope of the breach, including whether any data was compromised or a ransom demanded, has not yet been confirmed.

While an internal investigation is reportedly underway, the Department of Pensions has not publicly acknowledged any cybersecurity incident.

Cybersecurity analyst Asela Waidyalankara has urged authorities to take swift action following the latest threat, noting that the same monitoring platform (FalconFeeds.io) had previously flagged a data breach involving Cargills Bank in March 2025.

The Cloak ransomware group, identified in this instance, is known for encrypting sensitive data and extorting victims by demanding ransom payments for decryption keys and the non-disclosure of stolen information. (Newswire)

Cloak Ransomware Alert

Department of Pensions

The Department of Pensions in Sri Lanka is a government agency responsible for managing pension schemes for public sector employees, has fallen victim to Cloak Ransomware.

Initially, on April 02, 2025, the group posted… pic.twitter.com/LnEvbV6zjR

— FalconFeeds.io (@FalconFeedsio) May 27, 2025

The post Monitoring platform flags alleged data breach in Sri Lanka’s Pensions Dept appeared first on Newswire.