Illinois Precision Machining Company Agrees to Pay $421K to Resolve Alleged False Claims Act Violations

Swiss Automation Inc. has agreed to pay $421,234 to resolve alleged False Claims Act violations relating to its failure to provide adequate cybersecurity for certain drawings of parts that the company machined and supplied to Department of Defense (DoD) prime contractors.

Swiss Automation is an Illinois precision machining business that supplies alloy and metal parts to commercial and government customers in many industries, including DoD prime contractors and subcontractors.The settlement resolves allegations that Swiss Automation caused the submission of false claims by not providing adequate cybersecurity to safeguard certain drawings of parts that the company machined and supplied to DoD prime contractors.

According to a U.S. Department of Justice press release, Swiss Automation allegedly knew that the requirement to provide adequate security by implementing certain cybersecurity controls applied not only to DoD prime contractors, but also to subcontractors and suppliers to the prime contractors. The obligation to implement security controls specified in National Institute of Standards and Technology Special Publication 800-171 (NIST SP 800-171) to protect certain DoD information has applied to DoD contracts, subcontracts, and similar contractual instruments since 2017 and will continue under the Cybersecurity Maturity Model Certification (CMMC) program that DoD recently finalized.

“As cyber threats continue to evolve, suppliers to defense contractors must be vigilant and take the steps required to protect sensitive government information from bad actors,” said Assistant Attorney General Brett A. Shumate of the Justice Department’s Civil Division. “We will continue our efforts to hold defense contractors, subcontractors, and suppliers accountable when they fail to honor their DoD cybersecurity commitments.”

The settlement resolves a lawsuit filed under the whistleblower provisions of the False Claims Act, which permit private parties to sue on behalf of the government when a defendant has submitted or caused to be submitted false claims for government funds and receive a share of any recovery. The settlement in this case provides for the whistleblower, Jaime Gomez, a former quality-control manager at Swiss Automation, to receive $65,291 as his share of the settlement. The qui tam case is captioned United States ex rel. Gomez v. Swiss Automation Inc., No. 1:22-cv-4328 (N.D. Ill.).

The claims resolved by the United States in the settlement are allegations only. There has been no determination of liability.