By Dwayne Ferreira
Opposition MP claims the national carrier’s computer systems were compromised months ago, raising questions about cybersecurity, ransom demands and whether passenger information remains protected.
SriLankan Airlines is facing serious questions about the security of its computer infrastructure after Opposition Parliamentarian Dayasiri Jayasekera alleged that hackers had infiltrated the national carrier’s digital systems and demanded a cryptocurrency ransom of US$50,000.
The allegations, made in Parliament on Tuesday, October 20, have raised concerns about the vulnerability of the country’s flagship airline to cyberattacks and the possible consequences for its employees, operations and passengers.
Jayasekera claimed that the initial intrusion took place in June 2026 and that the perpetrators subsequently publicised their alleged access to the airline’s systems on the dark web.
However, the extent of the alleged intrusion, whether attackers retain access, and whether any passenger data has been compromised remain unverified in the material reviewed for this report.
Allegations of a Major Cybersecurity Breach
According to reports of the parliamentary proceedings, Jayasekera claimed that hackers gained access to SriLankan Airlines’ computer systems and employee email accounts.
He further alleged that the attackers released a video claiming responsibility for the incident and demanded US$50,000 in cryptocurrency.
The MP also questioned why assistance reportedly offered by the United States had not been accepted to resolve the situation.
Neither the alleged ransom demand nor the reported offer of American assistance should be regarded as independently established without confirmation from the relevant organisations.
The claims nevertheless warrant scrutiny because commercial airlines depend on interconnected information systems to manage reservations, personnel, financial transactions and numerous operational functions.
A security failure affecting one system does not automatically mean that all other systems have been compromised.
What About Passengers Who Have Already Booked Tickets?
For passengers, the most important question is whether sensitive information could have been exposed.
Airline reservation systems may contain names, contact details, travel itineraries, booking references and other personal information.
Depending on their technical configuration, other systems may also process payment-related information or identification details.
At present, there is no verified evidence in the sources reviewed that SriLankan Airlines passenger records, payment information or flight operations were compromised as a result of the alleged incident.
Nevertheless, authorities should clarify whether an independent investigation has established which systems, if any, were affected.
Why a Cyberattack Could Have Serious Consequences
Cybersecurity incidents in aviation can create operational, financial and reputational risks.
For an airline operating internationally, even limited disruption to essential technology can complicate customer service, staff communication or administrative operations.
A compromised employee email account can also create opportunities for impersonation, fraudulent correspondence or further unauthorised access.
However, email compromise should not be confused with control of aircraft, air traffic systems or flight safety functions. No such connection has been established by the available reporting.
A Cybersecurity Challenge for Sri Lanka
The controversy also raises wider questions about the protection of critical digital infrastructure in Sri Lanka.
Airlines, banks, ports, telecommunications providers and government institutions increasingly depend on complex computer networks.
As digital services expand, organisations must invest in security monitoring, incident response, independent audits and recovery systems.
A particularly important issue is whether organisations have adequate procedures to identify intrusions promptly and inform affected customers when legally required.
Questions SriLankan Airlines Must Answer
The airline and relevant government authorities now face several questions of significant public interest.
Was there a verified cybersecurity incident in June 2026? If so, when was it discovered, and what systems were affected?
Were employees’ email accounts accessed without authorisation, and was any passenger information exposed?
Did attackers demand payment, and was assistance offered by the United States or another international organisation?
Finally, has the airline completed an independent assessment demonstrating that affected systems are secure?
The Morning Telegraph has not obtained independently verified answers to these questions.
Transparency Is Essential to Public Confidence
SriLankan Airlines plays an important role in Sri Lanka’s international connectivity and tourism industry.
A credible investigation should distinguish between allegations, verified technical findings and any operational consequences.
The public deserves to know whether the national carrier experienced a security breach, what measures were taken and whether passengers need to protect themselves against any associated risks.
Until those facts are established, claims that the airline’s entire computer network remains under hacker control must be treated as allegations rather than conclusions.
