President Donald Trump signed a national security presidential memorandum on August 13, 2026, giving private-sector companies authority to carry out offensive cyber operations against foreign criminal organizations under U.S. government oversight.
The White House said the policy is designed to "leverage the capability and innovation of the private sector to help conduct these cyber operations under the direction, control and authority of the US government." The memorandum specifically names transnational criminal organizations as targets, according to The Guardian.
Ars Technica reported that this is the first time the U.S. government has formally authorized private companies to hack overseas cybercriminals. Private security firms will be permitted to carry out such operations, provided they remain under federal direction and control.
CyberScoop reported that experts view the memo as a philosophical shift in cybersecurity strategy, with opinion divided on whether it represents a sound approach or a dangerous precedent. The policy raises legal, practical, and moral questions, experts told the outlet. CyberScoop also noted that one expert called it a major change in U.S. cyber policy, and that past reservations had existed about bringing private actors into offensive operations.