Swiss Automation Agrees to $421,234 Settlement Over Cybersecurity Failures

URGENT UPDATE: Swiss Automation Inc., an Illinois-based precision machining company, has just settled cybersecurity negligence claims for $421,234 with the Justice Department. This settlement addresses serious allegations that the company failed to implement adequate cybersecurity measures for critical Defense Department parts blueprints.

According to a recent announcement from the Justice Department, the settlement resolves claims that Swiss Automation knowingly submitted false claims by neglecting required cybersecurity protocols for drawings supplied to Department of Defense (DoD) prime contractors. The firm was expected to comply with the National Institute of Standards and Technology Special Publication 800-171 (NIST SP 800-171) guidelines—standards that have been mandatory for defense contracts since 2017.

Despite these expectations, the Justice Department asserts that Swiss Automation was aware of the additional security measures mandated by the Cybersecurity Maturity Model Certification (CMMC) program, designed to enhance security for DoD contractors and suppliers.

In a critical statement, Assistant Attorney General Brett A. Shumate warned that “as cyber threats continue to evolve, suppliers to defense contractors must be vigilant and take the steps required to protect sensitive government information from bad actors.” This sentiment was echoed by U.S. Attorney Andrew S. Boutros for the Northern District of Illinois, who underscored the importance of robust cybersecurity measures, particularly for entities handling sensitive data.

The allegations first came to light thanks to whistleblower Jaime Gomez, a former quality-control manager at Swiss Automation. Gomez filed the lawsuit under the False Claims Act, which now entitles him to $65,291 from the settlement. The case, identified as United States ex rel. Gomez v. Swiss Automation Inc., No. 1:22-cv-4328, involved a collaborative effort among various branches of the Justice Department and military.

Next Steps: The settlement serves as a stark reminder for defense contractors about the critical nature of cybersecurity. Special Agent-in-Charge Jason Sargenski of the Defense Criminal Investigative Service emphasized that safeguarding national security requires stringent protection against increasingly sophisticated cyber threats.

As these developments unfold, businesses associated with defense contracts are urged to reassess their cybersecurity practices to avoid potential legal and financial repercussions. The increasing scrutiny of cybersecurity in the defense sector highlights the urgent need for compliance and vigilance in protecting sensitive information.

Stay tuned for further updates on this developing story as authorities continue to address cybersecurity issues in the defense industry.