A threat actor, identified as SILKFIN AGENCY, has claimed responsibility for a significant data breach involving the Sri Lankan Department of Agrarian Development‘s online platform (agrariandept.gov.lk). This department, which plays a crucial role in supporting the agricultural sector in Sri Lanka, is alleged to have had its database compromised on August 22, 2024. The breach purportedly exposes the personal and agricultural data of over 1.45 million farmers, including sensitive details such as NIC numbers, verification statuses, and various field-related information.
The compromised data allegedly includes extensive records that detail the farmers’ identities, verification statuses, and specific agricultural fields they manage. This incident raises serious concerns about the security and privacy of those affected, particularly in the context of government-managed platforms. The threat actor provided a sample of the exposed data to substantiate their claim, indicating the potential scale and impact of the breach.
