US Lawmakers Urge Sanctions Against Indian Hack-for-Hire Firms Over Targeting Americans

Appin previously obtained an Indian court order requiring Reuters to temporarily remove an article about the company while an appeal was pending. Reuters maintained the report was accurate, and the order was later overturned, allowing the article to be restored.
The Electronic Frontier Foundation provided legal support to Techdirt and McRock after the outlets received threats connected to reporting about Appin’s alleged involvement in hack-for-hire operations.
The lawmakers’ allegations come amid broader scrutiny of a global hack-for-hire industry in which operators are paid to infiltrate individuals’ accounts and devices for information that can be used in legal, political or business disputes.
The lawmakers described the alleged use of foreign courts as an effort that “keeps the American public in the dark about cyber threats to their own country” and said it undermines Americans’ constitutional rights.
A bipartisan group of U.S. lawmakers is pushing the Commerce Department to blacklist three Indian companies accused of running hack-for-hire operations against Americans. Radio USA reports that Senators Ron Wyden and Sheldon Whitehouse and Representative Pat Harrigan want BellTroX, CyberRoot, and Sunkissed Organic Farms (formerly Appin) placed on the federal Entity List for allegedly targeting thousands of people, including business owners and lawyers.
The designation would block U.S. companies from doing business with these firms and cut off access to critical software licenses and cloud services. The lawmakers say the companies stole information to influence legal disputes and used foreign courts to suppress reporting about their activities.
These three Indian firms operate in a growing global market where companies sell hacking services to the highest bidder. Star-Telegram reports the firms have been running these operations for over 15 years. Clients pay them to break into email accounts, smartphones, and computers to gather dirt on rivals, business competitors, or targets in legal disputes.
The hack-for-hire industry has exploded across multiple countries. Operators infiltrate personal accounts and devices to uncover secrets that can tip the scales in lawsuits, business deals, or political campaigns. This practice exploits vulnerable individuals who have no idea their privacy has been violated.
Appin has aggressively tried to keep its activities hidden from public view. The company obtained an Indian court order that forced Reuters to temporarily remove an article about the firm. Reuters refused to back down, saying the story was accurate. The court order was later overturned, and the article was restored.
When media outlets reported on the company's alleged crimes, Appin escalated its threats. The Electronic Frontier Foundation provided legal support to Techdirt and McRock after they received intimidating messages connected to their reporting. This pattern shows how the company uses intimidation to control the narrative about its activities.
The Commerce Department's Entity List is America's most powerful tool against foreign companies that threaten national security. Placing a company on the list blocks all U.S. firms from selling to them without special government permission. Software makers, cloud providers, and tech vendors would all be cut off from doing business.
The lawmakers argue the designation is necessary because the companies' actions "keep the American public in the dark about cyber threats to their own country." They say this suppression undermines Americans' constitutional rights to free speech and information. The Commerce Department has not yet said whether it will grant the request.
The alleged victims weren't random targets. The companies focused on business owners, lawyers, and professionals involved in high-stakes disputes. By stealing their confidential files and communications, the hackers gave unfair advantages to whoever paid for the attacks.
This targeted approach shows the sophistication of these operations. It's not mass surveillance for profit. Instead, these companies operate like hired mercenaries for wealthy clients who want to win at any cost. The lawmakers' push for sanctions signals growing frustration with a threat that operates largely outside public view.
Publishers
13
Articles
63
Reach
76