US cracks down on North Korean IT worker scams at 70+ US firms; shares email IDs
The US Department of Justice has dismantled a North Korean scheme that used stolen identities to place remote IT workers in over 70 American companies. The operation, which generated millions for sanctioned entities, involved the use of 'laptop farms' to facilitate the fraud.
Why it matters
This crackdown highlights the growing threat of state-sponsored cyber-enabled fraud and the vulnerability of corporate remote hiring processes.
The US Department of Justice (DOJ) has announced a coordinated crackdown on a North Korean remote IT worker scheme that allegedly infiltrated dozens of American companies using stolen identities, warning businesses about a growing threat that generated millions of dollars for Pyongyang. More than 70 US companies were affected by the operation, according to the department. The action includes criminal charges against multiple suspects, two arrests, searches of dozens of suspected "laptop farms" and the seizure of approximately 187 laptops and related devices used to help North Korean operatives obtain remote jobs at US companies.How the scheme workedAccording to an indictment unsealed in the Northern District of Ohio, North Korean workers got remote jobs at US companies from 2019 to around July 2025.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in