Trump Issues Order Allowing US Companies to Hack Overseas Groups Under Certain Conditions

Former President Donald Trump has issued a National Security Presidential Memorandum authorizing vetted U.S. private companies to conduct offensive cyber operations against overseas criminal organizations. Signed on August 12, 2026, and announced the following day, this directive allows approved firms to engage in "Cyber Surveillance Operations" and "Cyber Effects Operations" aimed at disrupting or destroying the systems of foreign threat actors. The policy marks a notable expansion of the private sector's role in cyber warfare, traditionally reserved for government agencies.

The administration stated that the order is intended to combat transnational cyber-enabled crime, such as ransomware, phishing, and sextortion, which annually costs American consumers billions of dollars. The White House highlighted that the innovative capabilities of U.S. businesses have historically been underutilized in efforts to disrupt these criminal networks. Under the new framework, participating companies will operate under the direct control and oversight of the U.S. government, requiring contracts with the Department of Justice or Homeland Security and written approval for specific operations.

This memorandum establishes a program to be managed by the Homeland Security Task Force's National Coordination Center, with executive directors from the Justice Department and Homeland Security. While the order aims to leverage private sector ingenuity against cybercriminals, it explicitly bars operations that could cause death or serious injury, or those that constitute a use of force under international law. The policy represents a significant shift, blurring the lines between government and commercial cyber activities, and has prompted varied reactions from experts regarding its legal and practical implications.