While there is increasing support for the idea of organizations hacking back in order to protect stolen data and disrupt an attacker, it remains a controversial approach that crosses legal, ethical, and professional boundaries. Just how far can private organizations go to protect their infrastructure and intellectual property from cyber attack? Is hack back a necessary offensive, or is it an all-advised approach that will likely escalate attacks? This analyst brief looks at this contentious issue.