SRF reports China suspected in Beyond Gravity cyberattack

Beyond Gravity and the Swiss government suspect China was behind a cyberattack on the state-owned Swiss space company, SRF reported on Thursday. Data appears to have been stolen, though the company and the Federal Department of Defence have not publicly confirmed the suspected origin of the attack.

Beyond Gravity, which makes satellite and rocket technology, announced the attack earlier this month, describing the suspected perpetrator as a “highly professional actor”. Several people involved in the investigation told SRF that the company and the government suspect China.

The Defence Department and the Federal Office for Cybersecurity are investigating. Beyond Gravity said the attacker’s origin remains subject to ongoing inquiries. The company has filed a criminal complaint against unknown perpetrators with the Bern public prosecutor’s office. The Office of the Attorney General of Switzerland, which handles political offences such as espionage, has not opened an investigation.

It is unclear what information the attackers accessed. Maya Graf, a Green Party member of the Council of States and president of the chamber’s parliamentary oversight committee, said the committees overseeing the government had received information about the data breach. A report on the security incident had also been provided, and the responsible group would assess whether further action was needed.

Ralph Weber, a professor at the University of Basel who researches Chinese intelligence services, said space had long been a focus for intelligence agencies, particularly given the rivalry between the United States and China. He said espionage often involves collecting details that may seem insignificant individually but could become important when combined.

Beyond Gravity supplies technology to customers including the European Ariane rocket programme and NASA. Weber said the Swiss government would need to weigh its response if firm evidence against China emerged, noting that a public accusation could affect foreign policy interests.

The cyberattack is the second major incident involving the state-owned company’s parent group, Ruag International. More than a decade ago, the group suffered a broad cyberattack that seriously compromised its IT security. The Office of the Attorney General opened an investigation after experts suspected Russia, but suspended it in 2018 because investigators could not identify those responsible.

The earlier attack had major consequences for Ruag. The government decided to split the group, separating the business mainly serving the Swiss army, now known as Ruag MRO. Several parts of the remaining Ruag International were later sold, with Beyond Gravity retained as its space business.