US Will Let Private Firms Launch Cyberattacks Under Federal Supervision

The U.S. government is opening a door it has historically kept shut: vetted private companies will be allowed to conduct offensive cyber operations against international criminal gangs and hackers, provided every operation remains under federal supervision.
 

TL;DR

 

• A new presidential memorandum allows approved private firms to conduct surveillance and disruptive cyber operations against cybercriminals.
• Companies must follow federal rules, secure government sign-offs, and place $1 million in escrow.
• The program does not authorize unrestricted “hack back,” and critics warn it could create legal and diplomatic risks for participating Americans.

 

US Private Firms Can Join Government-Supervised Offensive Cyber Operations

As per a presidential memoranda, the Trump administration wants to use the “innovative capabilities of the private sector” to fight ransomware, financial scams, sextortion, and other cyber threats targeting Americans.

Participating companies could use surveillance tools, including spyware, to collect intelligence and carry out disruptive operations designed to destroy criminal data or systems. That marks a major break from the U.S. government’s long-standing position that private companies may defend themselves from cyberattacks, but cannot launch attacks of their own.

Still, this is not a free pass for companies to strike back at whoever attacks them.
 

 

Federal Approval, $1 Million Escrow And US Targeting Safeguards Will Shape The Program

The program remains in its early stages, with the government expected to issue detailed participation requirements within two months. The guidance will consider companies of different sizes, including smaller firms that could be better suited to specialized operations.

Any approved company must deposit $1 million in escrow, which can be forfeited if the government finds it violated the program’s rules. Operations will also require sign-offs from representatives of the Justice Department and Department of Homeland Security and must be conducted exclusively under federal supervision.

The memorandum also directs agencies to establish safeguards preventing operations from targeting Americans or U.S.-based systems. Participating companies must notify the government if they discover an imminent cyberattack against critical infrastructure such as power grids or water providers.
 

 

US Cyberattack Policy Could Trigger Legal And Diplomatic Risks Abroad

The memorandum stops short of authorizing companies to independently “hack back,” but critics have long warned that involving private firms in offensive cyber operations could create international consequences.

Jake Williams, vice president of research and development at Hunter Strategy, called the policy “half-baked” and warned that Americans involved in such operations could face accusations or detention overseas.

“Americans participating in these operations could easily be classified as non-uniformed combatants while traveling overseas,” Williams told TechCrunch.

The White House did not say whether any private companies are already participating. The change arrives as the administration cites a “growing threat” from cybercrime, while U.S. states report attacks on water infrastructure and governments contend with increasingly capable AI-driven cyber operations.

For now, the biggest shift is clear: private cybersecurity firms may soon move from defending networks to helping the U.S. government disrupt attackers directly.