Opposition MP Dayasiri Jayasekara told Parliament on Tuesday that hackers have taken control of SriLankan Airlines’ computer systems and demanded USD 50,000 in cryptocurrency.

Jayasekara said the airline’s systems were compromised in June 2026 and that the attackers later claimed responsibility on the dark web. He alleged they released a video saying they had gained control of the systems.

“The entire SriLankan Airlines system was hijacked. They even released a video claiming responsibility,” he told the House. He also said the airline’s email systems had been compromised and that its email protection system had experienced problems since the attack.

“Even now, the system is in the hands of hackers. They could bring it down at any time,” Jayasekara said. He warned that a further attack could have serious consequences for the national carrier’s operations.

The MP alleged that efforts to investigate the incident had been obstructed. He said an official who tried to pursue an investigation was later made subject to an inquiry initiated through the Presidential Secretariat. He also said the United States, through representatives in Singapore, had offered help to address the cybersecurity weaknesses, but that the government had not accepted the offer.

Jayasekara urged the government to investigate the alleged breach immediately, secure the airline’s digital systems and explain what steps it has taken to prevent further attacks. The claims were made in Parliament and have not been independently verified. No response from the government or the airline was included in the reports available.

Background

SriLankan Airlines is the country’s national carrier and is owned by the state. It operates passenger and cargo flights between Colombo and destinations in Asia, the Middle East, Europe and Australia, and it carries many Sri Lankan migrant workers and members of the diaspora.

Airlines hold large volumes of personal data, including passenger names, passport details and payment information, along with the systems that handle bookings, check-in, crew scheduling and aircraft maintenance records. Cyberattacks that demand payment in cryptocurrency are commonly known as ransomware or extortion attacks, in which criminals threaten to disrupt systems or release data unless they are paid.

Jayasekara also referred to earlier financial irregularities involving the airline, including payments made through accounts in Dubai and India. He questioned whether those incidents were connected to weaknesses in its cybersecurity. He did not present evidence of such a link in the remarks reported.

What it means

If the claims are accurate, the airline’s booking and operational systems and the personal data it holds could be exposed to disruption or misuse. That would matter to travellers, including Sri Lankans working abroad who rely on the airline for routes home.

The allegations are those of an opposition MP and have not been confirmed. Passengers who want to know whether their data is affected would need an official statement from the airline or the government, which had not been issued in the reports available. The MP’s call for a prompt investigation and a public account of the steps taken is now before the government.