Trump enlists private sector cyber firms in new offensive against foreign criminal groups

President Donald Trump signed a national security presidential memorandum on Wednesday, August 12, 2026, empowering federal law enforcement to use cyber tools against transnational criminal organizations operating in foreign jurisdictions. The memo leverages private sector capabilities for cyber operations under US government direction, overseen by DHS and DOJ. Participating companies must maintain a bond of at least $1 million. The White House cited ransomware attacks and financial frauds as targets.

President Donald Trump signed a national security presidential memorandum on Wednesday, August 12, 2026, aimed at empowering federal law enforcement to use cyber tools against transnational criminal organizations (TCOs) that operate in foreign jurisdictions to attack Americans. The White House said the memo directs the administration to "leverage the capability and innovation of the private sector to help conduct these cyber operations under the direction, control, and authority of the US Government." The memo creates a framework encouraging private companies to enter into agreements with other private entities and government agencies to gather threat information and propose cyber operations. It directs the Department of Homeland Security, through the Homeland Security Task Force's National Coordination Center, to create a program to conduct specific cyber operations that disrupt foreign TCOs, overseen by DHS and the Department of Justice. Participating companies, once vetted, will conduct "cyber surveillance operations" and "cyber effects operations" against specified targets, which may include manipulation, disruption, denial, degradation, or destruction of information systems. Companies must maintain a bond or escrow of at least $1 million. The idea of private sector firms participating in cyber operations is not new and has been controversial due to fears of escalation and coordination issues. DHS and the White House did not immediately respond to requests for additional details.