Trump Authorizes Private Firms to Launch Cyberattacks on Foreign Gangs as U.S. Cybercrime Losses Top $20 Billion
Updated
Updated · POLITICO · Aug 17
Trump Authorizes Private Firms to Launch Cyberattacks on Foreign Gangs as U.S. Cybercrime Losses Top $20 Billion
3 articles · Updated · POLITICO · Aug 17
Summary
A Trump memorandum issued Wednesday lets vetted private companies conduct surveillance and state-sanctioned cyberattacks against foreign cybercrime groups, marking an unprecedented expansion of their legal role.
DOJ and DHS will supervise the program, which the White House says taps private-sector capabilities to fight gangs that cost Americans more than $20 billion in 2025.
The move builds on existing public-private operations such as Microsoft’s May 2025 Lumma malware takedown and Google’s effort last month to weaken devices used to mask hackers’ activity.
Cyber firms have pushed for a more aggressive role under Trump’s deterrence-focused cybersecurity strategy, but some experts warn federal review could slow operations so much that approved targets disappear before action is cleared.
Will the government's new cyber policy empower tech giants as digital mercenaries, or will bureaucratic red tape paralyze their efforts?
If a state-sanctioned private cyberattack accidentally destroys allied digital infrastructure, who ultimately takes the blame and pays the price?
America’s $20.9 Billion Cybercrime Crisis: The 2026 Policy Unleashing Private Hackers Against Global Criminals
Overview
In August 2026, facing soaring cybercrime losses and relentless attacks on U.S. infrastructure, the government authorized vetted private technology and security firms to launch offensive cyber operations against foreign criminal networks. This bold move, driven by resource shortages in federal agencies, established a tightly controlled framework but sparked fierce debate in the cybersecurity community. While aiming to disrupt global cybercriminals, the policy exposes private operators to serious personal and legal risks, and leaves companies vulnerable to lawsuits and foreign prosecution. The shift also unsettles allies and threatens to erode international cyber norms, as adversarial states are expected to retaliate aggressively.