US to Involve Private Companies in Limited Cyber Operations Against Foreign Criminal Groups

The United States is moving to involve private companies in limited cyber operations against foreign-based criminal organizations under government oversight. President Donald Trump signed a presidential memorandum on Wednesday authorizing the initiative.

According to the White House, the national security memorandum directs the government to leverage the technological expertise and innovation of the private sector to conduct approved cyber activities under federal supervision.

The new policy expands the role of private companies in combating cybercrime by allowing them to participate in certain operations that have traditionally been the responsibility of government agencies. However, the memorandum does not grant companies unrestricted authority to conduct hacking or cyberattacks. Instead, any cyber operation must receive government approval and be carried out under official oversight.

A White House fact sheet identifies foreign-based transnational criminal organizations (TCOs) as key threats, citing ransomware attacks, financial fraud, and other forms of cybercrime. The initiative aims to strengthen national cyber defenses by utilizing private-sector technical capabilities against these organizations.

Under the memorandum, private firms will be able to enter into agreements with other companies as well as federal, state, local, tribal, and regional government agencies. These partnerships will support intelligence gathering on transnational criminal organizations and enable companies to propose cyber operations designed to counter cyber threats.

The memorandum also directs the Department of Homeland Security (DHS) to establish a dedicated program for the initiative. The program will be managed through the Homeland Security Task Force National Coordination Center and overseen by both the DHS and the Department of Justice.

Authorized participants will be permitted to conduct "cyber surveillance activities" and "cyber effects operations" against approved targets. These activities may include accessing, modifying, disrupting, disabling, or damaging information systems, networks, and their associated physical or virtual infrastructure.

Companies seeking to participate must also meet financial requirements, including posting a bond or escrow deposit of at least $1 million.

The announcement comes amid growing international concern over the increasing cyber risks posed by advanced artificial intelligence technologies. New-generation AI models have demonstrated the ability to exploit vulnerabilities in legacy security systems, while several critical infrastructure facilities in U.S. states—including water supply systems—have experienced cyberattacks this year.

The Trump administration has previously emphasized expanding private-sector involvement in cybersecurity. Its National Cybersecurity Strategy, released in March, also called for government incentives to encourage private-sector participation in countering foreign cyber threats.

Despite the initiative, legal experts have expressed concerns about involving private companies directly in international cyber conflicts. They warn that such operations could escalate tensions, create risks of unintended consequences, and complicate coordination among government agencies.

How extensively the United States ultimately relies on the private technology sector under this new program remains a key question as the policy moves toward implementation.