> They hacked a train that was owned by the railway company ...

The article seems to say the hackers were hired by the maintenance place that the owner of the trains (Lower Silesian Railway) hired.

Newagg is the manufacturer of the trains which were bought, not the owner of them.