IC Oversight & Policy — 2026-09-10

Bipartisan Lawmakers Request Treasury Sanctions Against India-Based Cyber Mercenary Firms That Targeted HPSCI Chairman Family for Qatar

BLUFDespite bipartisan backing, Commerce designation of these India-based cyber mercenary firms is unlikely by late March 2027, leaving them free to procure US cloud services and software.

Democratic Sens. Ron Wyden and Sheldon Whitehouse and Republican Rep. Pat Harrigan sent Commerce Secretary Howard Lutnick a letter Wednesday asking that three India-based firms, Sunkissed Organic Farms (formerly Appin), BellTroX and CyberRoot, be added to the department's entity list, restricting their access to US software, cloud infrastructure and other technology 123. CyberScoop's account identifies Treasury as the letter's recipient, while TechCrunch, Nextgov/FCW and SC Media identify Commerce 1. The lawmakers wrote that the firms have conducted espionage against US citizens, companies and lawyers for more than fifteen years and stolen data from thousands of Americans 12. They stated the groups operated at the behest of the Qatari government and targeted opponents of Qatar's World Cup bid and the family of a former House Intelligence Committee chairman; Reuters reporting cited by CyberScoop in 2023 identified that family member as Kristi Rogers, wife of former Chairman Mike Rogers, now a Senate candidate 1. The letter also accuses the firms of using foreign lawfare, including an Indian court order against Reuters, to suppress US media coverage of their activities 23.

Analysis
Commerce action against the three firms is unlikely within the next seven months, since Entity List designation requires an executive-branch national-security determination that a bipartisan letter alone does not compel, and Commerce has shown no public sign of opening a review or pairing it with a parallel Treasury or State sanctions push. Confidence is moderate, reflecting press accounts that converge closely on the letter's substance, though one names Treasury rather than Commerce as recipient, and there is no visibility into internal deliberations. The letter may function primarily as political messaging tied to Mike Rogers's Senate candidacy and press-freedom advocacy rather than a request lawmakers expect swift action on. Absent a review, the firms retain access to US cloud infrastructure and software and can continue operating against American citizens, companies and litigants without added cost.
4 sources
  1. Lawmakers call on Treasury to sanction hackers-for-hire - CyberScoop
  2. Group of bipartisan lawmakers ask US government to ban several hack-for-hire firms - TechCrunch
  3. Lawmakers ask Commerce to sanction Indian firms involved in mercenary hacking - Nextgov/FCW
  4. US lawmakers ask government to ban 3 hack-for-hire firms - SC Media

View in full brief →

UNCLASSIFIED // OPEN SOURCE