Trump Memo Lets Vetted U.S. Firms Join Offensive Hacks On Cybercriminals
President Donald Trump issued a memorandum allowing vetted U.S. companies to carry out offensive cyber operations against foreign cybercriminal groups, NPR reported Saturday, Aug. 15, 2026.[1]
The memorandum explicitly authorizes actions that "result in the manipulation, disruption, denial, degradation, or destruction of information systems" belonging to foreign cybercriminal groups.[1] It says existing U.S. anti-hacking laws remain in place and requires offensive activity to occur under contracts with federal agencies, primarily the Department of Justice or the Department of Homeland Security.[1] Participating firms would also have to set aside $1 million that the government can collect if a company fails to meet its obligations under the program.[1]
The New York Times first reported the administration was moving to let private firms target cybercriminals two days earlier.[2] The NPR account says the memo leaves key implementation details undefined, including the precise vetting process, how targets will be selected, and the legal justification for disruptive operations.[1] Joshua Steinman and Arthur Tellis told NPR that likely targets include organized crime rings that launder money, and they cautioned firms may be more effective at surveillance than at disruption.[1]
Industry observers say some firms view the policy as an onramp to more U.S. government work if they are selected to participate.[1]
Show source details & analysis (2 sources)
📌 Key Facts
- NPR reported Saturday, August 15, 2026 that a memorandum would allow vetted U.S. companies to carry out offensive cyber operations against foreign cybercriminal groups, authorizing actions that "result in the manipulation, disruption, denial, degradation, or destruction of information systems."
- The NPR story says the plan does not change existing U.S. anti-hacking laws and requires any offensive activity to occur under contracts with federal agencies, primarily the Department of Justice or the Department of Homeland Security.
- Participating companies would be required to set aside $1 million that the government can collect if a firm fails to meet its obligations under the program.
- The memorandum leaves key implementation details undefined, including the precise vetting process, how targets will be selected, and the legal justification for specific disruptive operations.
- Experts Joshua Steinman and Arthur Tellis told NPR that likely targets include organized crime involved in money laundering and other illicit activity, and they cautioned firms may be more effective at surveillance than disruption while many see participation as an "onramp" to more U.S. government work.
📰 Source Timeline (2)
Follow how coverage of this story developed over time
- The NPR article emphasizes that existing U.S. anti-hacking laws remain unchanged and that any offensive activity must occur under contracts with the federal government, primarily DOJ or DHS.
- It specifies that participating companies would be required to set aside $1 million that the government can collect if a company fails to meet its obligations under the program.
- The memorandum’s language is quoted as allowing actions that 'result in the manipulation, disruption, denial, degradation, or destruction of information systems' belonging to foreign cybercriminal groups.
- The piece underscores that the memo leaves key implementation details undefined, including the precise vetting process, how targets will be selected, and the legal justification for specific disruptive operations.
- Experts quoted (Joshua Steinman and Arthur Tellis) say likely targets include organized crime engaged in money laundering and other criminal activity, and suggest firms may be more effective at surveillance than disruption, with many seeing this as an 'onramp' to more U.S. government work.