Trump Authorizes Private Firms to Conduct Offensive Cyber Operations
A new presidential memorandum allows vetted companies to perform surveillance and disruption to combat transnational cybercrime.
President Donald Trump has signed a National Security Presidential Memorandum directing the U.S. government to enlist vetted private companies to combat cybersecurity breaches driven by transnational criminal organizations (TCOs). The initiative marks a shift toward an aggressive offensive posture by integrating private sector capabilities into national security operations.
Under the directive, signed August 12, 2026, authorized private firms may conduct "Cyber Surveillance Operations," which involve gaining unauthorized access for intelligence purposes, and "Cyber Effects Operations," defined as the manipulation, disruption, or destruction of adversary systems. To participate, companies must undergo a rigorous vetting process and enter into formal contractual agreements. The program specifically targets transnational cybercrime, including ransomware, phishing, financial fraud, and sextortion.
Oversight and Governance
To manage the risks of outsourcing offensive capabilities, the program will be governed by strict federal oversight. Operations will be managed by two Executive Directors: one designated by the Attorney General of the Department of Justice (DOJ) and another by the Secretary of Homeland Security (DHS). According to the memorandum, this partnership with vetted U.S. companies is intended to enhance the government's ability to counter TCO threats and combat predatory schemes targeting American citizens.
Rising Costs of Cybercrime
The administration's move comes as the financial toll of cyber-enabled crime continues to climb. American consumers reported losing more than $20.8 billion to such crimes in 2025. This surge in losses has prompted the White House to move beyond traditional defensive measures, seeking to disrupt the infrastructure of criminal organizations before they can execute attacks.
Industry Implications
This policy represents a significant expansion of the U.S. government's cyber offensive reach. By outsourcing "effects operations" to the private sector, the administration is blurring the traditional line between government intelligence agencies and commercial entities. This shift raises critical questions regarding the boundaries of private company involvement in national security and whether the oversight provided by the DOJ and DHS is sufficient to prevent misuse or collateral damage during offensive actions.
Future Outlook
As the program rolls out, industry observers will be watching for the specific criteria used to vet participating firms and the transparency of the operations conducted. It remains to be seen how these private-sector interventions will impact the overall volume of transnational cybercrime and whether the partnership will lead to a measurable decrease in the billions of dollars lost annually to fraud and ransomware.