Trump Memo Would Bring Private Companies Into Federal Hacking Operations, Experts Warn
Summary
A presidential memo would enlist private companies in federal cyber operations against transnational criminal groups. Experts debate its legal and ethical risks, attribution dangers, oversight, and how 60-day implementation guidance will define the program.
Key points
- The memo establishes a program for private companies to assist federal offensive cyber operations against transnational criminal organizations.
- Critics warn that targeting rules, legal authority, and limited oversight could create constitutional and ethical risks.
- Experts say rushed or mistaken attribution could lead companies to target the wrong entities, including foreign governments.
- Supporters argue private-sector capabilities could help the U.S. counter cybercrime and match adversaries’ cyber operations.
- A coordination center has 60 days to develop implementation guidance, including target-selection procedures and operational standards.
- The memo’s execution leaves questions about government control during operations, third-country impacts, seized assets, and potential victim compensation.
Article Details
- Event Type
- Presidential memorandum authorizing private-sector companies to assist in federal offensive cyber operations against transnational criminal organizations.
- Impact
- The memorandum could expand federal cybercrime operations by bringing private-sector capabilities into the effort. Experts warn that unclear implementation, legal and constitutional concerns, and rushed or mistaken attribution could expose companies to legal risks or result in attacks on unintended targets, including foreign governments. The program's scope, oversight, and procedures remain to be determined.
People
Amanda NaylorDirector of cyber policy at the National Security Council who worked on the memorandum and described its aim as bringing private-sector capabilities into the fight against transnational cybercrime and fraud.Ari RedbordGlobal head of policy at TRM Labs who praised the memorandum and raised questions about operational direction, victim compensation, third-country impacts, and how success would be measured.Davi OttenheimerSecurity consultant and founder of Ottenheimer GmbH who criticized the memorandum, citing targeting, legal, and ethical risks.Joshua SteinmanFormer Trump White House cybersecurity official who supported the memorandum as a way to strengthen U.S. cyber capabilities and said its restrictions were important.Michael GarciaFormer official at the Cybersecurity and Infrastructure Agency and vice president of the cybersecurity practice at Monument Advocacy; he supports some ideas in the memorandum but warned that uncertain attribution could lead to unintended targets being attacked.Robert GrahamCEO of Errata Security who commented on the memorandum's federal supervision provisions, classified annex, and questions about seized assets and implementation.Will BarkerCybersecurity adviser at Huntress who said the 60-day implementing guidance would be important for setting operational standards and target-selection procedures.
Countries
Industries
CybersecurityBut ultimately, “it’s a massive shift in the cyber policy community,” said Michael Garcia, a former top official at the Cybersecurity and Infrastructure Agency.Law enforcementA newly-signed presidential memorandum enlisting private sector companies in federal law enforcement hacking operations against criminal organizations could present a number of legal, practical and moral pitfalls, cyber