Media playback is unsupported on your device
Sri Lanka has admitted a “major intelligence lapse” before the Easter Sunday bomb attacks which killed 359 people and wounded more than 500.
An Indian intelligence warning from the beginning of the month about planned attacks was not properly shared by the authorities, parliament heard.
President Maithripala Sirisena has moved to sack the defence secretary and inspector general of police.
Eight of the nine attackers have been identified as Sri Lankan citizens.
The government is investigating whether the Islamic State (IS) group was involved in the attacks which targeted churches and high-end hotels.
Police are still searching for the leader of a local Islamist group, Zahran Hashim, who was among eight people in a photograph released by IS. It is not clear whether he was among the nine suicide bombers.
It has emerged that one of the attackers once studied in the UK and Australia before returning to Sri Lanka.
How did the authorities get it wrong?
“We have to take responsibility because unfortunately if the sharing of the intelligence information had been given to the right people, I think that at least this could have been avoided or even minimised,” said Deputy Defence Minister Ruwan Wijewardene.
Lakshman Kiriella, the leader of parliament, said senior officials had deliberately withheld intelligence about possible attacks.
Media playback is unsupported on your device
“Some top intelligence officials hid the intelligence information purposefully,” he told MPs.
“Information was there but the top brass security officials did not take appropriate actions.”
He said the Indian tip-off had been received on 4 April but, Reuters news agency says, both the president and Prime Minister Ranil Wickremesinghe reportedly did not receive it.
President Sirisena replaced Defence Secretary Hemasiri Fernando and took steps to sack the Inspector General of Police, Pujith Jayasundara.
What do we know about the attackers?
A UK government official confirmed the name of the bomber who had visited the UK as Abdul Latif Jamil Mohammed.
He had visited south-east England in 2006-7 to study but did not complete a full university degree.
Deputy Defence Minister Wijewardene said the attacker had gone on to do “his postgraduate in Australia before coming back to settle in Sri Lanka”.
Media playback is unsupported on your device
Mr Wijewardene added that most of the attackers had been “well educated and come from… middle or upper middle class” families.
“They are financially quite independent and their families are quite stable financially,” he said.
Two of the bombers are reportedly brothers and the sons of a wealthy Colombo spice trader. They detonated their explosives at the Shangri-La and the Cinnamon Grand hotels, police sources told the AFP news agency.
From privilege to terror
Analysis by the BBC’s Security Correspondent Frank Gardner
The announcement that most of the attackers were “well educated” and “middle class” is not as surprising as it sounds.
Although poverty and lack of opportunities have steered many down a path to terrorism, there are also numerous examples of individuals abandoning a relatively comfortable lifestyle for a violent cause.
Ziad Jarrah, one of the 9/11 attackers who hijacked United Airlines flight 93, came from a privileged Lebanese family. More recently, there have been cases of British jihadists who have worked for the NHS, including doctors.
The late IS executioner Mohammed Emwazi, aka “Jihadi John”, attended the University of Westminster in London. And the original co-founder of al-Qaeda, Osama Bin Laden, chose to leave behind a luxurious life in Jeddah to go and fight the Soviets in Afghanistan during the 1980s.
Sri Lanka’s government has blamed the blasts on local Islamist group National Thowheed Jamath (NTJ) but Mr Wickremesinghe said the attacks “could not have been done just locally”.
NTJ has no history of large-scale attacks but came to prominence last year when it was blamed for damaging Buddhist statues. The group has not said it carried out Sunday’s bombings.
IS said online that it had “targeted nationals of the crusader alliance [anti-IS US-led coalition] and Christians in Sri Lanka”.
It provided no evidence for the claim but shared an image on social media of eight suspected attackers.
What action are security forces taking?
Police have now detained around 60 suspects in connection with the attack. A state of emergency remains in effect to prevent further attacks.
Image copyright
Getty Images
Funerals continued on Wednesday
The nearly simultaneous attacks targeted three churches packed for Easter services and three major hotels in the capital, Colombo.
An attack on a fourth hotel on Sunday was foiled, Mr Wickremesinghe said. He also warned that further militants and explosives could still be “out there” following the attack.
One of the targeted hotels, the Kingsbury, has now reopened.
The country remains tense with police still looking for suspects and possible further explosives.
Cautioning about “ongoing terrorist plots in the country”, US envoy to Sri Lanka Alaina Teplitz told reporters that terrorists could “strike without warning”.
Who were the victims?
The first mass funeral was held on Tuesday, as Sri Lanka marked an official day of mourning for the victims.
Most of those who died were Sri Lankan nationals, including scores of Christians attending Easter Sunday church services.
Some 38 foreign nationals were among the dead, with another 14 unaccounted for. The death toll includes at least eight British citizens and at least 11 Indian nationals.
The mass funeral for about 30 victims took place at St Sebastian’s church in Negombo, north of Colombo, which was one of the places targeted in Sunday’s blasts.