US Government Moves to Let Private Companies Hack Foreign Criminals

The Trump administration has introduced a new program that could change how the United States handles digital threats. According to NPR News, the government is creating a system to allow private companies to hack into the networks of foreign cybercriminals. This plan represents a significant shift in policy, as such work has traditionally been performed only by government agencies.

This announcement follows previous reports from earlier this week about the government's intention to authorize private firms to carry out cyberattacks. Under the new plan, companies will not act on their own. Instead, they must sign contracts with the Department of Justice or the Department of Homeland Security. These companies will undergo a process called “rigorous vetting,” which means the government will carefully check their background and abilities before allowing them to participate. Additionally, companies must set aside $1 million, which the government can take if the company fails to follow the rules of the contract.

Joshua Steinman, who worked on cyber policy for the National Security Council during President Trump’s first term, noted that this program could target groups involved in organized crime or money laundering. He suggested that many companies might see this as a way to gain more government work and improve their reputation. However, the exact details of how these companies will be chosen, or how the government will select which foreign groups to attack, remain unclear. The presidential memo does not fully explain how private businesses will take the lead on tasks like spying or disrupting computer systems, which are usually handled by the state.

While the idea has received support from some who believe it will help the U.S. fight back against digital threats, others are more cautious. Arthur Tellis, a former Department of Defense staffer, believes that private companies might be better at watching criminals than actually stopping them. He pointed out that these firms are likely looking for opportunities to increase their visibility or get more resources from the government. Some experts also worry about the legal side of the plan. Current U.S. laws generally stop people and businesses from hacking into computer networks, with only a few exceptions for law enforcement. The new memo does not change these laws, which creates questions about how these private attacks will be justified in court.

This initiative has been compared by some to the concept of “privateers.” In the 16th century, privateers were private ships that were given permission by a government to attack enemy vessels during times of war. While the current memo does not give private companies the same level of freedom as historical privateers, the idea has gained interest among some lawmakers. Two Republican congressmen have already proposed legislation that would encourage this kind of partnership between the government and private firms to take the fight to foreign hackers.

Despite the interest, there are still many unanswered questions. It is not yet clear which companies will actually want to take part in this program. Historically, private corporations have worked with the federal government, but they have usually played a support role rather than acting as digital saboteurs. The government has not yet provided clear information on the types of attacks that will be allowed or how it will prevent these private actions from causing unintended problems. As the administration moves forward, the public and industry experts will be watching closely to see how the government manages the risks of letting private businesses enter the world of international cyber operations.