Companies allegedly targeted US firms and attorneys through hacking campaigns influencing litigation.
US Senators Seek Action Against Three India-Based Firms Over Alleged Hacking
Washington: A bipartisan group of US senators has urged the Trump administration to take action against three India-based companies accused of being involved in hacking campaigns that allegedly targeted thousands of Americans, businesses and legal professionals.
Democratic Senators Ron Wyden and Sheldon Whitehouse , along with Republican Senator Pat Harrigan , have written to US Commerce Secretary Howard Lutnick seeking action against Sunkissed Organic Pvt Ltd, BellTroX Ltd and CyberRoot Ltd .
In their letter, the lawmakers alleged that India-based cyber-mercenary groups have spent more than 15 years carrying out targeted espionage operations against US citizens, companies and lawyers involved in sensitive legal disputes.
The senators cited investigations by Reuters and The Citizen Lab, which they said uncovered widespread hacking campaigns allegedly targeting private equity firms, pharmaceutical companies and more than 1,000 attorneys working at major US law firms.
According to the lawmakers, the alleged activities were not limited to stealing information. They claimed the stolen data could have been used to influence or manipulate ongoing litigation, raising concerns about the potential impact on businesses, lawyers and the US legal system.
The senators also pointed to allegations that the groups operated at the direction of the Qatari government. They said the targets allegedly included individuals who opposed Qatar’s bid to host the World Cup, as well as members of the family of a former Republican chairman of the House Permanent Select Committee on Intelligence.
The lawmakers described the alleged activities as a broader national security concern. They also accused the companies and their associates of attempting to suppress investigative journalism that reported on their alleged hacking operations.
“Compounding this security threat,” the senators said, the groups had allegedly pursued an aggressive campaign of global lawfare aimed at restricting investigative reporting by major American media organisations.
The lawmakers argued that using foreign courts to limit reporting could prevent the American public from learning about potential cyber threats affecting the country. They said such efforts could also raise concerns about constitutional rights and press freedom.
The senators further alleged that the same companies had attempted to force the removal of reports about their hacking campaigns through legal action in foreign jurisdictions. At one stage, they claimed, this resulted in a global takedown of an investigation.
The letter also highlighted ongoing legal disputes involving the Indian companies and major US technology and media organisations. The senators said the companies have lawsuits involving firms including Google, Meta and Microsoft , as well as The New Yorker , which they alleged were intended to silence criticism and suppress information about the hacking campaigns.
Seeking a stronger response, Wyden, Whitehouse and Harrigan called on the Commerce Department’s Bureau of Industry and Security (BIS) to place Sunkissed Organic, BellTroX and CyberRoot on the US Entity List .
Being placed on the Entity List can impose significant restrictions on a company’s ability to obtain certain US-origin goods, software and technologies. The senators said such action could help limit the companies’ access to American software, cloud infrastructure and cybersecurity tools.
The allegations come amid growing international concern over the activities of private cyber-mercenary groups and the use of commercial hacking capabilities for espionage. For the senators, the issue goes beyond individual cyberattacks, touching on national security, legal disputes, press freedom and the protection of sensitive information.
The companies named in the letter have been accused of serious wrongdoing, but the allegations remain allegations unless established through legal or regulatory proceedings. The Commerce Department’s response to the senators’ request will determine whether further restrictions are considered.
US senators: Ron Wyden, Sheldon Whitehouse and Pat Harrigan.
Companies named: Sunkissed Organic Pvt Ltd, BellTroX Ltd and CyberRoot Ltd.
Main allegation: The companies were accused of involvement in hacking and espionage campaigns targeting Americans and US organisations.
Reported targets: Private equity firms, pharmaceutical companies and more than 1,000 attorneys.
Other allegations: The senators said the groups targeted individuals connected to Qatar-related disputes.
Media concerns: The lawmakers alleged attempts to suppress investigative reporting through foreign courts.
US companies mentioned: Google, Meta and Microsoft, along with The New Yorker .
Requested action: Add the three companies to the US Commerce Department’s Entity List .
Potential impact: Entity List restrictions could limit access to certain US-origin technology and services.
Important: The claims are allegations and should not be treated as established facts unless confirmed through appropriate legal or regulatory
proceedings.