# In a first, US will allow some private firms to carry out cyberattacks

- URL: https://talkfuse.com/story/in-a-first-us-will-allow-some-private-firms-to-carry-out-cyberattacks/
- Published: 2026-08-13T14:09:05+00:00
- Original publisher: TechCrunch
- Original article: https://techcrunch.com/2026/08/13/in-a-first-us-will-allow-some-private-firms-to-carry-out-cyberattacks/
- Topics: Americas, Cybersecurity, Government, Politics, Technology, World

## Key points

- US may authorise private firms’ offensive cyber operations.
- Operations require federal approval and supervision.
- Critics warn of legal and diplomatic risks.

## Summary

The US government will, for the first time, permit vetted private companies to conduct offensive cyber operations against overseas criminal gangs and hackers under federal supervision. The White House says the policy could help tackle ransomware, financial fraud and sextortion, but it represents a major departure from the previous rule that private firms could defend themselves but not launch cyberattacks.

Participating companies could use surveillance tools, including spyware, and disrupt or destroy criminals’ data or systems, subject to approval from the Justice Department and Homeland Security. Firms must place $1 million in escrow, operations must not target Americans or US-based systems, and guidance on eligibility is due within two months. The policy does not allow companies to independently “hack back”, and critics warn it could trigger legal, diplomatic and personal-security risks for private-sector staff.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.