US Lawmakers Urge Blacklisting of Three Indian IT Firms Over Espionage Allegations

A bipartisan group of U.S. lawmakers is urging the Commerce Department to add three Indian information technology firms to a trade blacklist, citing allegations of more than a decade of espionage against American citizens and businesses. The move would effectively cut the companies off from critical U.S. technology and software.

The Call for Sanctions

In a letter issued Wednesday, Democratic Senators Ron Wyden and Sheldon Whitehouse, along with Republican Representative Pat Harrigan, formally requested that the Commerce Department place the firms on its Entity List.

The companies named in the letter are:

• BellTroX
• CyberRoot
• Sunkissed Organic Farms Pvt. Ltd. (formerly known as Appin Technology Pvt. Ltd.)

Being added to the Entity List would prohibit the firms from acquiring U.S. software, cloud infrastructure, and cybersecurity tools, severely impacting their operational capabilities. The lawmakers accused the firms of conducting “more than fifteen years of targeted espionage against U.S. citizens, businesses, and the lawyers representing them,” according to Reuters, which viewed the letter.

Background on the Accusations

Ad

The call for blacklisting follows years of public reporting from media organizations and major technology companies that have identified the firms as central players in the global hack-for-hire industry. These cybermercenary groups are allegedly hired by clients, including Western law firms and private investigators, to conduct espionage during business and legal disputes.

Reports from Meta Platforms and Alphabet-owned Google, as well as investigations by Reuters, The New Yorker, and the Bureau of Investigative Journalism, have previously detailed hacking activities tied to the firms. According to a 2023 Reuters report, Appin was a pioneer in the field, growing from an educational startup into a firm that stole secrets from executives, politicians, and military officials worldwide. Executives from all three companies have previously denied wrongdoing.

Market and Security Implications

This legislative pressure signals a potential escalation in the U.S. government's efforts to combat the growing cybermercenary threat. For corporations and investors, it highlights the persistent risk of sophisticated corporate espionage and the need for robust cybersecurity measures.

A blacklisting would serve as a stern warning to the international IT services industry, demonstrating that facilitating malicious cyber operations against U.S. interests can lead to severe economic consequences. According to the source, the Commerce Department and the named firms either did not respond to or could not be reached for comment.