Over 300 people have been killed and around 500 injured in the string of blasts
When a series of suicide bombs tore through some churches and hotels across Sri Lanka—on Easter Sunday—most of the country, along with the rest of the world, was taken completely by surprise.
However in the capital, Colombo, not everyone was shocked.
Some elements of the Sri Lankan government were aware of warnings regarding a potential attack on churches and tourist destinations, reports CNN.
Intelligence services in India and the US told Sri Lanka of the threat early in April, officials said. One memo compiled by Sri Lankan security officials was so specific that it even provided a list of suspects.
In the run-up to the holiest day in the Christian calendar, the warnings seemed to increase in frequency and urgency.
But it would seem to have made no difference.
When suicide bombers walked into three churches around Sri Lanka, and three upscale hotels in Colombo, they met no enhanced security. As worshipers closed their eyes in prayer, and hotel guests lined up for breakfast, the attackers detonated their devices.
It was unclear on Monday why the red flags went unheeded — especially since Sri Lanka has been wracked by political divisions since a constitutional crisis last year.
President Maithripala Sirisena attempted to replace the incumbent prime minister, Ranil Wickremesinghe, with a favored candidate. Wickremesinghe was reinstated in December after the intervention of the Supreme Court, but the government remains deeply divided.
Now, there are fears that the political feuding could have provided a window for a catastrophic security lapse that could reverberate across the region.
Series of warnings
The origins of what appears to be a spectacular security failure go back more than two weeks. On April 4, foreign intelligence agencies told Sri Lankan officials of a potential plot to launch suicide attacks against Christian churches and tourist spots, according to government spokesman Rajitha Senaratne.
Five days later, on April 9, the country's Defence Ministry informed the Inspector General of Police of this alleged plot, and named a group believed to be behind the plan, the Nations Thawahid Jaman (NTJ).
Unusually, the memo also included a list of suspects.
Also Read- Death toll in Sri Lanka blasts rises to 310
On April 11, another memo, signed by Priyalal Dissanayake, the Deputy Inspector General of Police, was circulated widely to a range of security services and some government ministries, according to Senaratne and a police source. That memo, a copy of which has been seen by CNN, laid out the threat and again contained a list of suspects.
Foreign security services repeated their warnings in the days and hours before the attack, Senaratne told reporters on Monday. One warning came ten minutes before the blasts, he claimed — although it was not clear whether he was speaking with precision.
An economy minister, Harsha de Silva, said he later learned that those warnings came from came from India, and from the US. Their content? "Something terrible was to happen," he told CNN's Christiane Amanpour.
All of this came against the backdrop of the divisions within government that lingered from the constitutional crisis of 2018. In an interview with CNN, De Silva said the prime minister was "kept in the dark" about the warnings.
Senaratne, who is also a health minister, said the prime minister had been removed from the national security council in December, and therefore did not receive confidential security briefings.
Even after the attack, members of the national security council refused to attend a meeting called by the premier, Senaratne claimed. "I think this is the only country in the world where the security council does not like to come when summoned by the prime minister of the country," he said.
Referring to the warnings about the involvement of the Nations Thawahid Jaman (NTJ) in a potential attack, Senaratne said he did not believe a local group could have acted alone. "There must be a wider international network behind it," he told reporters.
In a statement reported by Reuters, President Sirisena said the Sri Lankan government would seek foreign assistance as it investigated potential international links to the attack. His office would not comment on the apparent failure to heed warnings, Reuters said.
De Silva, an ally of the premier, argued that Sunday's terrible loss of life did not amount to a failure of intelligence, but a failure to mount an appropriate response to that intelligence.
Focus on Islamist group
The group named in the memos as planning an attack, Nations Thawahid Jaman, has hitherto acted only in the margins, blamed of defacing Buddhist statues.
According to Saroj Kumar Rath, a terrorism and security expert at the University of Delhi, NTJ has its origins in the south Indian state of Tamil Nadu in the early 2000s.
Manoj Joshi, a fellow at Indian think tank Observer Research Foundation, said that NTJ had carried out protests at places like liquor stores in the past, but he was not aware that it had initiated any previous terror attacks.
There are numerous small groups like the NTJ around India and South Asia, Joshi said. "The problem was that this group did not have a history of any kind [of violence] in the past. They [the authorities] may have been blindsided by the lack of focus on this group," Joshi said, noting that that while Sri Lanka was no stranger to terrorist attacks, violence in the country has historically existed under a very different context.
Mainstream Muslim groups have said they tried to warn the Sri Lankan authorities about the potential danger posed by NTJ. But its relative obscurity has raised questions about whether it would have had the capacity to carry out such a sophisticated and coordinated attack alone.
Dhruva Jaishankar, a fellow in foreign policy studies at Brookings India, told CNN that while it was premature to speculate on which organizations might have been involved, the role of "a larger organization cannot be dismissed."
"It is a bit of a stretch for an organization like that to conduct sophisticated simultaneous explosions," he said of NTJ.
Jaishankar said there was a known presence of ISIS-linked groups in neighbouring India, the Maldives, and Bangladesh—as well as Pakistan and the Philippines—but that there was little evidence of ISIS activity in Sri Lanka.
What seems clear, Jaishankar said, is that the assault had a religious motivation and was also designed to target foreigners. "These are people who wanted to hurt Sri Lanka's reputation," he said.
The coordination and planning of Sunday's attacks—involving multiple high profile targets, suicide bombers and powerful bombs—appears to have been long in the works.
Sri Lankan authorities have already admitted to missing multiple warning signs. Now, a nation still reeling in horror from Sunday's bloodshed is waiting to see just how widespread the failure was, and how much of a role the country's dysfunctional politics played in it.