Libya’s Central Bank Cybersecurity Under Attack: Technical Shutdown Threatens the Dinar and Shakes Confidence in the Financial System
What happened at the Central Bank of Libya was more than another technical glitch. A coordinated cyberattack knocked the bank’s official website and several key service platforms offline. The attack came at a particularly sensitive political moment, as the bank continues to navigate internal divisions and major administrative changes.
What began as a technical disruption quickly became a serious test of whether Libya’s main monetary institution can protect its digital infrastructure and maintain public confidence. The incident has fueled anxiety across banking and economic circles. It has also exposed, once again, how fragile Libya’s financial sector remains in the face of ongoing political and institutional divisions.
Emergency Response and Ransomware Suspicions
As soon as the Central Bank detected the cyber incident affecting parts of its systems and technical services, it isolated the affected infrastructure and activated its emergency response and business continuity plans.
The bank also brought in international cybersecurity specialists and forensic experts to help investigate and contain the attack. That decision reflected an important reality: cybercrime crosses borders and demands international cooperation. So far, the bank says it has found no evidence that customer data has been compromised. Investigators are still working to determine exactly how the attackers gained access. While many indicators point toward ransomware, and one ransomware group has publicly claimed responsibility on specialist forums, Libyan authorities have not confirmed either the claim or the identity of those behind the attack.
Digital forensic teams are now trying to determine whether the attack was financially motivated or formed part of a broader political or intelligence operation, given Libya’s current political environment.
The Damage Extends Far Beyond Financial Losses
The real cost goes well beyond the direct expense of responding to the incident. The shutdown disrupted electronic services, forced the bank to hire international specialists, delayed financial transactions, increased operational risks, and damaged confidence in the country’s financial system.
International experience shows that attacks on central banks are judged less by the amount of money stolen than by their ability to disrupt financial operations, unsettle markets, and undermine trust in monetary institutions. One of the clearest examples is the Foreign Currency Booking Platform, one of the Central Bank’s most important tools for managing demand for foreign currency and limiting reliance on the black market. The platform plays a critical role in stabilizing Libya’s exchange rate.
When the platform goes offline, the official supply of foreign currency slows immediately. Traders and importers turn to the parallel market, while ordinary citizens and businesses face delays in obtaining foreign currency. Even short disruptions create uncertainty, place additional pressure on the dinar, and quickly feed through to higher inflation and rising prices.
The impact became visible almost immediately. Anxiety spread among businesses, traders, and the wider public. Import activity slowed, many smaller businesses delayed transactions, and concerns grew that cyber vulnerabilities could eventually expose customer data or disrupt the country’s electronic clearing system.
This is not the first time the platform has come under attack. In April 2024, it suffered a similar cyber incident. The Central Bank restored services quickly, allowing the platform to process tens of thousands of requests within two days.
A Blow to Public Trust and the Return of the Cash Crisis
Cyberattacks strike at the one asset every banking system depends on most: public trust.
When confidence in electronic banking weakens, people withdraw cash and keep money outside the formal financial system. That behavior risks reviving the cash liquidity crisis that Libyan commercial banks have struggled with for years. As more money shifts into the parallel economy, demand for physical cash increases, monetary policy becomes less effective, and inflationary pressures intensify. Those risks are especially significant in a country where cash transactions still dominate everyday commerce.
Libya’s efforts to expand digital banking will ultimately depend on the Central Bank’s ability to build credible cyber defenses. Public confidence in financial technology begins with confidence that the state can protect it. The timing makes the challenge even greater. Central banks around the world continue expanding digital services while exploring central bank digital currencies. Strong cybersecurity has become a prerequisite for that transition.
Foreign Investment and Sovereign Risk
Foreign investors no longer view cybersecurity as a purely technical issue. They increasingly see it as an indicator of how effectively a country manages risk. Repeated cyberattacks against financial institutions can raise sovereign risk, increase the cost of doing business, and influence investment decisions made by multinational companies and international organizations.
It becomes far more difficult to attract long-term investment into sectors such as oil, infrastructure, and construction when the country’s financial system appears vulnerable to cyber threats. Research consistently shows that growing cyber risks weaken investor confidence and slow the adoption of digital financial services unless governments back digital transformation with strong governance and robust security frameworks. Every successful breach raises Libya’s risk profile and encourages international correspondent banks to adopt a more cautious approach toward Libyan financial institutions.
UN Concerns and Warnings of “Functional Paralysis”
The UN Support Mission in Libya and several international financial institutions have expressed concern about attacks targeting sovereign digital infrastructure. They view the stability of Libya’s banking system as closely linked to economic and social stability, while emphasizing the importance of protecting the Central Bank’s neutrality and its digital infrastructure.
International indicators highlight the scale of the challenge. According to the International Telecommunication Union’s Global Cybersecurity Index, Libya remains in the lower development tier, leaving financial institutions more exposed to sophisticated cyber threats. Research from international security institutes also suggests that attacks against central banks in transitional states often seek more than financial gain. Their objective may be to create what analysts describe as “functional paralysis” by disrupting financial systems and interrupting the flow of goods and services. Such operations increasingly form part of modern hybrid warfare.
The IMF’s Perspective
The International Monetary Fund has identified cyber risk as one of the most significant emerging threats to financial stability when attacks target critical financial infrastructure. IMF research argues that cybersecurity is no longer simply an information technology issue. It has become a core element of institutional governance, operational resilience, and financial stability.
The Fund recommends creating dedicated cyber risk units, embedding cybersecurity into strategic planning, conducting regular resilience testing, and routinely bringing in independent external experts. Protecting a central bank’s digital infrastructure has therefore become an essential part of protecting the wider economy. Any meaningful financial reform program in Libya should treat cybersecurity as a national priority alongside monetary policy reform, banking sector modernization, and stronger governance.
Digital Security Is Now National Security
Protecting the Central Bank of Libya’s digital infrastructure is no longer a secondary technical responsibility. It has become a matter of national and economic security. This incident raises important questions. Was it simply a financially motivated cybercrime, or did it form part of a broader attempt to weaken one of Libya’s few remaining national institutions that continues to operate across the country?
Any serious program of financial and structural reform should include the creation of a national cyber defense center. Such an institution should stand alongside exchange rate management, banking reform, and fiscal discipline as one of the pillars protecting the Libyan state, its economy, and the savings of its citizens from increasingly sophisticated digital threats.
Economy
banking sector
Banking Security
Central Bank of Libya
Cyberattack
Cybersecurity
Digital Infrastructure
Financial System
Libya
Libya Central Bank
Libyan Dinar
Ransomware
