The "hackers" (specialists hired by the train owner) presented their findings and the manufacturers reaction on the last two chaos communication congresses if you want to hear their side of the story directly:

• Breaking "DRM" in Polish trains – Reverse engineering a train to analyze a suspicious malfunction (2023)
• We've not been trained for this: life after the Newag DRM disclosure (2024)