RUAG Pays Ransom After Cyberattack.
Swiss defence company RUAG has confirmed that it paid a ransom to hackers following a cyberattack on its US subsidiary. The incident has sparked debate about cybersecurity strategies and the risks of negotiating with cybercriminals.
According to RUAG Board Chairman Jürg Rötheli, the company paid what he described as a “small amount” after the hacker group Akira infiltrated systems at the company’s US subsidiary in late 2025. The hackers reportedly stole sensitive data and threatened to publish it unless their demands were met.
Rötheli stated that the payment enabled the company to recover all of the stolen data. However, he declined to reveal the exact amount that was transferred to the cybercriminals.
The decision has attracted attention because it goes against the recommendations of Switzerland’s Federal Office for Cybersecurity (FOCBS). The agency generally advises organizations not to pay ransom demands, arguing that such payments can encourage further cyberattacks and help finance criminal operations.
Cybersecurity experts frequently warn that paying hackers does not guarantee long-term protection and may make organizations more attractive targets in the future. Nevertheless, some companies choose to pay when they believe critical business operations or sensitive information are at risk.
The attack on RUAG highlights the growing threat posed by ransomware groups, which increasingly target government agencies, defence contractors, and major corporations worldwide. These cybercriminal networks often use stolen data as leverage to pressure victims into making payments.
As cyber threats continue to evolve, the case is expected to fuel discussions in Switzerland about cybersecurity preparedness, risk management, and the appropriate response to ransomware attacks. The incident also underscores the importance of strengthening digital defences across critical industries and national security sectors.
