The Active Cyber Defense Certainty Act would exempt victims of cyber attacks from being prosecuted for attempting to hack back at their attackers under the Computer Fraud and Abuse Act (CFAA) If enacted, the law allows organizations that are the victims of hacks to conduct their own hacks to identify the assailants, stop the attacks or retrieve stolen files. At a high level, it makes sense, but in practice, it is ridiculous. Most victims are ill-equipped to deal with an incident and even less equipped to hack another organization without creating damage. The law fundamentally lacks an understanding of computer crime.”]
Source: https://www.csoonline.com/article/3199585/hack-back-law-would-create-cyber-vigilantes.html