TRCSL directed to block access to leaked bank data

April 8, 2025 at 2:43 PM

The Colombo Chief Magistrate’s Court has ordered the Telecommunications Regulatory Commission of Sri Lanka (TRCSL) to block access to all websites and social media accounts that publish or distribute illegally obtained data of Cargills Bank PLC.

The directive follows a petition filed by Cargills Bank on April 4 under Section 24 of the Online Safety Act No. 9 of 2024. The case (No. 43022/1/25) names all Internet Service Providers in Sri Lanka and the TRCSL as respondents.

Appearing for the petitioner bank were attorneys Geeth Karunarathna, Manujaya De Silva, and Nisal Dulmith. The court has fixed the matter for notice returnable on April 21.

The order comes in the wake of a reported data breach said to contain sensitive customer information including national identity details. Several journalists and digital rights activists have raised concerns over the breach and the response to it.

In a statement issued in March, Cargills Bank said that upon detection, it acted promptly to reinforce its security protocols, isolate the affected system, and engage leading cybersecurity experts for a comprehensive assessment. The bank said this proactive approach aimed to mitigate potential risks, ensure system integrity, and safeguard both customer and institutional interests.

Cargills Bank also assured that its banking operations remain unaffected, with no disruption to services. The bank reiterated its commitment to maintaining the highest standards of cybersecurity and operational resilience to uphold customer trust. (Newswire)