Obama signs order creating new cyber sanctions program

U.S.President Barack Obamacreated the first-ever sanctions program to penalize overseas hackers who engage in cyber spying and companies that knowingly benefit from the fruits of that espionage, potentially including state-owned corporations in Russia and China.

"Cyberthreats pose one of the most serious economic and national security challenges to the United States," Obama said in a statement after signing an executive order creating the sanctions on Wednesday.

The order was the latest attempt by his administration to come up with options short of direct retaliation to deal with a growing cyberthreat coming from both nations and criminal groups. It gives the U.S. the authority to sanction individuals and companies, though no specific penalties were announced.

• Github coding site hit by cyberattack
• Lenovo website hacked, employee emails compromised

Obama said the sanctions would apply to those engaged in malicious cyber activity that aims to harm critical infrastructure, damage computer systems, and steal trade secrets or sensitive information.

In a fact sheet, the White House said the sanctions would also apply to "corporations that knowingly profitfrom stolen trade secrets." Analysts have long suspected that state-owned companies in China and Russia are complicit in economic cyber espionage that targets the intellectual property of Western companies.

State-sponsored hacking

The announcement follows the Obama administration's allegations that North Korea was behind last year's cyberattack on Sony Pictures. Major U.S. companies, including Target and Home Depot, have also been the target of hacking that put consumer information at risk.

The U.S. government says hackers based in Russia and China have engaged in widespread pillaging of corporate trade secrets, some of it state-sponsored. Former National Security Agency director Keith Alexander calls it the greatest transfer of wealth in history.

The administration has "really thought about how to make this painful to the beneficiaries," of cyberspying, said James Lewis, a cyber expert with the Center for Strategic and International Studies. "They've gotten away with this for a long time, so making them suffer a little for stealing is a good idea."

The U.S. did sanction several North Korean individuals in retaliation for the Sony hack, but they were not targeted specifically for their role in that incident.

In May, the Justice Department issued criminal indictments against five Chinese military hackers it accused of cyber espionage against U.S. corporations for economic advantage. But the hackers are in China and out of reach of the U.S. justice system. Potentially, some of the companies that benefited from their cyber spying do business in the global economy and therefore could be hurt by U.S. sanctions.