Cyberattack on Stadler Rail: alleged hacker on trial in Zurich (cross-border guide)

Context

The trial against the alleged hacker opened today before the Zurich District Court. The man, accused of hacking companies, including Stadler Rail, denies the allegations.

According to investigations, the alleged hacker allegedly compromised the security of several computer systems of Swiss companies, including Stadler Rail, one of the country's leading train construction companies. The basic engineering studio in Bussnang in the Canton of St. Gallen, a manufacturer of trains and locomotives, suffered a cyber attack in 2022, which compromised the security of sensitive data.

The case was brought to light thanks to investigations conducted by the Swiss Federal Police, which found that the alleged hacker had used a number of attack methods, including phishing and ransomware, to gain access to companies' computer systems.

The trial is taking place in a tense climate, as investigations have revealed that the alleged hacker allegedly compromised the security of more than 100 Swiss companies, including banks and insurance companies. According to estimates, the economic damage caused by the cyberattack could amount to more than 10 million Swiss francs.

The alleged hacker, accused of hacking companies, denies the allegations and claims to be innocent. His lawyer stated that his clients were not involved in any kind of criminal activity and that the allegations are “baseless.”

The Zurich District Court shall

Operational details

Key facts

• Chi: a 52-year-old Ukrainian computer scientist
• When: The trial opened today before the Zurich District Court
• Where: Zurich District Court
• Amount: 12 years imprisonment and expulsion

The trial against the alleged Ukrainian hacker opens in Zurich, Switzerland, after an investigation that lasted several years. The investigation was conducted by the Swiss Federal Police (NFI) and also involved the Federal Prosecutor's Office. The federal prosecutor accused the man of orchestrating a cyberattack against the railway technology company Stadler Rail, based in Bussnang, in the canton of St. Gallen.

The cyberattack has been described as “one of the most serious cyberattacks in the history of Switzerland”. According to the Federal Prosecutor's Office, the man allegedly used malware to access Stadler Rail's computer systems and steal sensitive data. The investigation also revealed that the man allegedly used a Swiss hosting service, based in Lugano, in the canton of Ticino, to hide his tracks.

The investigation was conducted in collaboration with cybersecurity authorities of several nations, including the United States, Germany, and Russia. The federal prosecutor accused the man of violating the Electronic Communications Act (LCE), which prohibits the spread of malware and the collection of sensitive data without authorization.

The trial will take place before the Zurich District Court, which has ruled that

Useful tools to protect your net income

To reduce FX leakage, compare CHF-EUR exchange options and banks for cross-border workers.

Key points

The investigation links the case to a Russian strategy, but the defense questions the reliability of the digital evidence. The alleged hacker faces 12 years in prison and deportation.

According to the sources, the alleged hacker, a Russian citizen, allegedly acted in connection with a criminal organization. The defence maintains that the digital evidence has been manipulated and that there is no concrete evidence to accuse his client. The issue is complex, as digital evidence is often difficult to verify and can be easily altered.

The case is particularly sensitive, as it involves a large company like Stadler Rail, which operates worldwide and is based in Bussnang, in the Canton of St. Gallen. The company produces trains and transport systems and has an annual turnover of about CHF 3.5 billion.

The Swiss law on cyberterrorism, introduced in 2018, provides for severe penalties for anyone involved in cyberterrorism activities. The law states that anyone who participates in a cyberterrorism criminal group can be punished with a sentence of 3 to 12 years in prison. In addition, anyone who participates in a cyber-terrorist criminal group can be expelled from the country.

The defence claims that his client did not commit any crime and that the digital evidence was manipulated.

The process is currently underway in Zurich and is expected to last several months. The issue is particularly sensitive, as

Discover Ticino job offers updated daily: 4,000+ positions from Swiss companies hiring cross-border workers.

Source: tio.ch