Connect with us

News

CID informs PCoI its inability to recover deleted data from the phone of ex-SIS Director

Published

on

By Rathindra Kuruwita

The Digital Forensic Laboratory of the CID had been unable to recover deleted data from the mobile phone used by former Director of the State Intelligence Service (SIS) SDIG Nilantha Jayawardena during the Easter Sunday attacks, the PCoI probing Easter Sunday attacks was told on Wednesday night.

OIC of the Digital Forensic Laboratory, Sampath Kumara Senaratne told the PCoI that Jayawardena’s wife was using the phone now and that Jayawardena told him that he conducted a factory reset before giving it to his wife. A factory reset restores an electronic device to its original system state by erasing all information stored on the device.

The PCoI in September ordered a mobile phone and a laptop used by former State Intelligence Service (SIS) Director to be sent to the CID for extraction of data relevant to their investigation. SDIG Mahesh Welikanna, attached to PCoI Police unit, was asked to take into custody a mobile phone used by SDIG Jayawardena, which he used to record some of his conversations with senior security officials after Easter Sunday attacks and his laptop that he had been using to give evidence.

Chairman of PCoI also gave specific instructions to the SDIG of the CID about handling the devices. He said: “These devices must be opened before a representative of Jayawardena, two officers of PCoI police unit, a CERT official appointed to assist the PCoI and a representative of the current SIS Director. Any relevant data, in conversations recorded or in messaging applications, between January 01 and December 31, 2019, must be extracted in front of these individuals.”

The Chairman also ordered the SDIG of the CID to ‘hard delete’ (erase in a way that is impossible to recover data) personal data or information pertaining to national security. However, that did not apply to data pertaining to early warnings on Easter Sunday attacks, any information on National Thowheed Jamaat (NTJ) or its leader Zahran Hashim, suicide bombers and those who were killed in Sainthamaruthu on April 26, 2019.

The Chairman said: “The CID must also see if there has been any deletion of data and see if they can be recovered. All the reports should be sent to PCoI secretary. After the investigations are over the phone and laptop should be returned to the PCoI secretary too.”

This task was entrusted to the OIC of the Digital Forensic Unit, who presented a report to the PCoI on Wednesday night. OIC Sampath Kumara Senaratne informed the Commission that since Jayawardena had done a factory reset there was no way of reproducing deleted content.

Chairman of the PCoI: “Did you ask SDIG Jayawardena why he had done a factory reset ?”

OIC Senaratne: “He told me that he had given the mobile phone to his wife and that he had wanted to remove everything that could compromise national security from the phone.”

Chairman of the PCoI: “But you couldn’t verify when the data was deleted?”

OIC Senaratne: “No. Verifying the data would have required me to connect the phone to the Internet. However, I was working within certain limitations set by the PCoI. Moreover, in a digital forensic investigation, we usually don’t connect the phone to the Internet. So, I couldn’t verify when a factory reset was done.”

However, the CID had been able to recover some data that had been deleted from SDIG Jayawardena’s laptop, the PCoI was informed.

The OIC said that about 2.6 million deleted files had been recovered and about 210 of them, relevant to the probe handed over to the Presidential Commission Police Unit.



Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

‘IRIS Dena was Indian Navy guest, hit without warning’, Iran warns US of bitter regret

Published

on

A day after a US submarine sunk an Iranian Navy warship off the coast of Sri Lanka, the Foreign Minister of Iran, Sayed Abbas Araghchi, has warned that the US would “pay bitterly” for targeting a ship in international waters, The Tribune has reported.

Araghchi posted on social media platform X on Thursday saying, “The US has perpetrated an atrocity at sea, 2,000 miles away from Iran’s shores.”

The frigate IRIS Dena, a guest of India’s Navy carrying almost 130 sailors, was struck in international waters without warning, said the Iran Foreign Minister, adding, “Mark my words: The US will come to bitterly regret the precedent it has set.”

US Secretary of War, Pete Hegseth, on Wednesday confirmed that a US submarine fired a torpedo and sank the Iranian Navy vessel IRIS Dena west of Sri Lanka.

In a way, the Iran and US-Israel conflict has reached close to the Indian coast. The strike today at sea was almost 4,000 kms away from Iran, significantly expanding the radius of war. Already, fearing Iranian missile strikes, several US warships have moved eastward towards India.

These ships are in international waters. India has denied that any US Navy assets were using Indian ports. The Iranian ship, hit on Wednesday, was returning after participating in the international fleet review and exercise Milan hosted by India at Visakhapatnam.

The Iranian ship went down with almost 130 sailors on board missing. The Sri Lankan Navy, acting on a distress call, rescued 32 of the Iranian sailors. Hegseth confirmed the act by the US forces, saying the ship was hit in the Indian Ocean, stating, “an Iranian warship that thought it was safe in international waters. .. Instead, it was sunk by a torpedo”.

Hegseth did not name the Iranian ship that was attacked. But earlier, the Sri Lankan Navy reported the distress call from IRIS Dena when it was some 40 kms west of Galle, located on the south-western part of the island country. On February 16, the Iranian ship had sailed into the port of Visakhapatnam, where seventy-four nations participated.

Warships from Australia, Japan, South Korea, Russia, and dozens of others were anchored alongside the now-sunk Iranian vessel. Iran’s Navy Commander, Rear Admiral Shahram Irani, held talks with India’s Chief of Naval Staff on strengthening maritime security cooperation.

The theme was “United through Oceans.” Notably, the US Navy was supposed to send the guided-missile destroyer USS Pinckney to the exercise Milan; however, the ship was diverted to Singapore on February 15. The US did not field its warship in Milan, which had ships from Russia and Iran.

The exercise ended on February 25. Three days later, on February 28, the United States and Israel launched Operation Epic Fury. The IRIS Dena was transiting home. This morning at 5:08 a.m. local time, the IRIS Dena issued a distress call. Sri Lanka’s Foreign Minister, Vijitha Herath, informed parliament that two navy vessels and an aircraft were deployed. Thirty crew members were rescued and admitted to Karapitiya Hospital in Galle.

The Straits Times reported 32 critically wounded survivors. Reuters reported 101 missing and 78 wounded. The Sri Lankan Navy spokesman said the operation was conducted in line with the International Convention on Maritime Search and Rescue.

Continue Reading

News

Risk of power cuts due to use of low-quality coal,PUCSL warns

Published

on

The Public Utilities Commission of Sri Lanka (PUCSL) has warned of a possible risk of power cuts due to the use of inferior quality coal affecting generation capacity at the Lakvijaya Power Plant, according to a recent commission report.

The commission said the risk to the continuous electricity supply was assessed based on the peak demand forecast submitted by the Ceylon Electricity Board (CEB) for 2026.

According to the report, the analysis assumed that hydropower plants could contribute up to 1,300 MW to meet the night peak demand, while the Lakvijaya Power Plant (LVPS) would be able to contribute only up to 690 MW due to a capacity shortfall, assuming a 40 MW generation capacity reduction from each unit.

The PUCSL said the assessment was carried out taking into account the planned maintenance schedule submitted by the CEB. Under the schedule, Unit 1 of the Lakvijaya plant is due to undergo maintenance checks and repairs in June for a period of 25 days, while Unit 2 is scheduled for maintenance in July for another 25 days.

The report also noted that the 270 MW West Coast Power Plant is scheduled to undergo maintenance in April for 10 days, while the 150 MW Kelanitissa Combined Cycle Power Plant (KCCP 2) is expected to undergo maintenance during May, June and July.

Under normal conditions, the report said, there is a potential risk of a generation capacity shortage if electricity demand reaches 3,030 MW in April, 3,070 MW in June and 3,000 MW in July.

The highest recorded night peak demand so far in 2026 was 2,949 MW on February 25.

The PUCSL further warned that if one coal unit or any major power plant becomes unavailable from the existing generation mix, there would be a significant risk of a generation capacity shortage to meet the night peak demand, particularly during April, June and July.

Energy sector analysts said the use of substandard coal could further aggravate operational challenges at the Norochcholai plant, potentially affecting generation efficiency and reliability if corrective measures are not taken promptly.

By Ifham Nizam

Continue Reading

News

Sajith demands clear statement from govt. about Iranian vessel sunk close to Galle and another located near Colombo port

Published

on

Sajith Premadasa

Opposition and SJB Leader Sajith Premadasa yesterday demanded a “clear statement from the government regarding this, as well as on the Iranian ship that was attacked near Galle, the number of personnel involved, and other related details,” following the sinking of an Iranian naval vessel in waters off Sri Lanka.

Making a special statement in Parliament, Premadasa said that information had been received about another Iranian vessel in Sri Lanka’s maritime boundary near the Port of Colombo and urged the government to immediately clarify the situation.

Premadasa said the government should also issue a special statement regarding international media reports that the Iranian Navy ship IRIS Dena had been sunk in the Indian Ocean with a torpedo attack by a US submarine.

He said the Sri Lanka Navy had carried out a search and rescue mission following the incident, a move that the Opposition appreciated.

However, the government had not yet informed Parliament of the exact location of the attack, whether the incident occurred in Sri Lankan waters or what diplomatic measures had been taken in response, Premadasa said.

“It has been revealed via international media that the Iranian Navy ship ‘IRIS Dena’ was sunk following an attack by a US submarine in the Indian Ocean,” he said.

The Opposition Leader added that the failure of the government to brief Parliament on an incident of such magnitude was preventing Members of Parliament from properly carrying out their duties.

Premadasa said several international media outlets as well as US Secretary of War Pete Hegseth had confirmed that a torpedo had been launched from a US submarine targeting the Iranian naval vessel, although the government and the Defence Ministry had denied those reports.

“The government must make an official announcement in this regard,” he said.

Premadasa further told Parliament that information had also come to light about another Iranian ship currently within Sri Lankan territorial waters off the Colombo Port, stressing that the government must immediately clarify the matter.

by Saman Indrajith

Continue Reading

Trending