Newag S.A. (pronounced "nevag") is a Polish company, based in Nowy Sącz, specialising in the production, maintenance, and modernisation of railway rolling stock.

[6] In May 2024, the company secured a PLN 2.7 billion (EUR 740 million) contract with PKP Intercity, which aims to diversify its rolling stock, for the delivery of 35 hybrid dual-mode multiple units.

[8] At the OhMyH@ck conference held in Warsaw on 5 December 2023, software engineers from white hat hacker group Dragon Sector revealed that they had reverse engineered the embedded software of Newag 45WE Impuls EMUs after operator Koleje Dolnośląskie had experienced a number of mysterious breakdowns when maintenance was performed by their selected contractor Serwis Pojazdów Szynowych (SPS).

[15] It was also revealed that the Polish Internal Security Agency (ABW) had, in October 2022, submitted a case against Newag regarding the abovementioned software manipulation incidents to the prosecutor's office in Nowy Sącz, which initially downplayed the incident until said findings publicly came to light, after which, the investigation was taken over by the regional prosecutor's office in Kraków on suspicion of crimes committed under Article 269 §1 and Article 286 §1 of the Polish Penal Code.

[16] Newag strongly denied the claims they intentionally disabled their software and instead alleged SPS was propagating a conspiracy theory to avoid contractual penalties for being unable to service the trains.

[17] The Dragon Sector hacker group subsequently gave a presentation at the 37th Chaos Communication Congress (37C3) in Hamburg on 27 December 2023, where they explained in detail the process of debugging the train software and their findings.