Trump's Private Cyber Operations

The story so far

As of August 13, 2026

A high-stakes remake of U.S. cyber policy is underway: the White House is moving to openly enlist private companies in offensive operations against foreign cybercriminal networks. It puts the Trump administration and U.S. cyber firms on the offensive against transnational gangs, with implications for deterrence, liability, and international norms.

After years of costly ransomware and intrusions, the administration laid out plans to bring private firms directly into U.S. cyber operations. On March 6, it issued a National Cyber Strategy for America and an executive order targeting transnational cybercrime that codified a public-private partnership model, setting the stage for formal authorities.

On Aug. 13, President Trump signed a national security presidential memorandum authorizing vetted U.S. companies, under federal direction and oversight, to conduct cyber operations against transnational criminal organizations. This is the first U.S. authorization for certain private firms to carry out offensive cyber actions, reversing decades of policy that barred hack back, and it moves industry from defense and intelligence sharing to government-sanctioned disruption of criminal infrastructure.

The story has moved to implementation and control. The immediate work is defining rules of engagement, federal tasking and oversight, liability or indemnity for companies, and deconfliction with intelligence equities and allied jurisdictions. The legal footing, including how this interacts with the Computer Fraud and Abuse Act and sovereignty norms, has not been tested in court. Attribution errors, spillover into third countries, and uneven partner laws are the variables that determine whether this model delivers sustained disruption without creating new risks.