Provincial Department of Health Services Sri Lanka listed on kryptos leak site
Provincial Department of Health Services Sri Lanka has been listed on the leak site by the threat actor known as kryptos.
- Published
- 2 min read
- 2 min read
- Ransomware group: kryptos
- Country: Sri Lanka
- Sector: Government & Defense
- Announcement date: November 6, 2025
The Provincial Department of Health Services Sri Lanka has been listed on a leak site by the threat actor known as kryptos. The announcement, made on November 6, 2025, indicates a potential data breach involving the government agency responsible for health services in the North Western Province of Sri Lanka.
The claim by kryptos
The kryptos group announced that they have added the Provincial Department of Health Services Sri Lanka to their leak site. Through this listing, the group claims to have obtained data belonging to the institution. The announcement highlights the scale of the organization's operations, noting that the institution operates with 145 health institutions, 439 field clinic centers, and 850 medical officers.
In many modern ransomware attacks, threat actors utilize leak sites to exert pressure on victims. This tactic is often associated with double extortion, where attackers not only encrypt an organization's data but also threaten to release sensitive information publicly if a ransom is not paid. By listing a target on a public forum, the group aims to increase visibility and pressure the victim to comply with their demands.
Details of the alleged data leak
Regarding the specifics of the information allegedly stolen, the current information is limited. The listing includes general details regarding the institution's health facilities and medical staff; however, no specific screenshot or detailed information regarding the types of data allegedly leaked is available. No information was provided regarding the total size of the data, the specific file count, or the ransom demand.
The listing names no specific data types.
About the Provincial Department of Health Services Sri Lanka
The Provincial Department of Health Services Sri Lanka is a government agency that manages and coordinates health services in the North Western Province of Sri Lanka. It oversees a network of hospitals, field clinics, and medical personnel to provide public health services in the region.
Risk assessment and defensive considerations
This incident suggests the possibility that the institution's administrative and operational data may have been compromised. As an entity operating in the healthcare sector, the potential exposure of personal health records or personnel information could lead to secondary risks such as identity theft and targeted phishing attacks for individuals.
Because information regarding the kryptos group is limited, no definitive assessment can be made regarding their motivation or technical capabilities. In such scenarios, organizations typically find it prudent to review their data security protocols and cooperate with relevant authorities to mitigate potential damages. Strengthening defensive measures, such as implementing multi-factor authentication, maintaining offline backups, and conducting regular security audits, is a common practice for organizations looking to protect sensitive information from similar threats.