US Government Authorizes Private Firms for Offensive Cyber Operations Against Criminal Gangs

In a significant pivot in its cybersecurity strategy, the United States government, under the Trump administration, has announced a new program authorizing vetted private companies to conduct offensive cyber operations against foreign criminal organizations. The presidential memorandum, issued on August 12, 2026, directs the departments of Justice and Homeland Security to establish a framework for this initiative. The primary objective is to aggressively disrupt costly cybercrime schemes, such as ransomware, online fraud, and sextortion, which reportedly cost Americans over $20 billion in 2025. The new policy represents a dramatic expansion of the private sector's role in offensive cyber operations, traditionally reserved for government agencies. Participating companies, operating under federal approval and supervision, will be allowed to carry out both cyber surveillance and cyber effects operations. Surveillance involves secretly accessing systems to gather intelligence, while effects operations can manipulate, disrupt, deny, degrade, or destroy information systems and data belonging to these criminal groups. However, this bold move is not without its critics and risks. Cybersecurity experts have voiced concerns about potential legal challenges, the blurring lines between government and commercial activities, and the risk of geopolitical escalation. Companies participating in such operations could face substantial personal legal risks and become targets themselves. The memorandum mandates strict guardrails, requiring operations to cease if a U.S. person or system is accidentally targeted, and ensuring judicial authorizations for any actions raising constitutional questions. It also stipulates that operations cannot authorize actions resulting in death, serious injury, or those constituting an armed attack under international law. The White House has given the departments 60 days to finalize the operating procedures, including standards for company participation and coordination with existing military and intelligence cyber activities.