US Charges 14 Over North Korean IT Worker Scheme at More Than 70 Companies
The FBI also raided more than 40 suspected ‘laptop farms’ in Texas and seized about 187 computers and devices.
October 14, 2026 - 11:01 am
Seal of Justice Department
Credit: lev radin via Shutterstock.com
The US Justice Department has charged 14 people over a North Korean job scam, announced on Tuesday. North Korean IT workers used stolen names to get remote jobs at more than 70 US firms.
The workers earned about $3 million, which went to North Korean groups under US sanctions, according to prosecutors. The scheme targeted firms in health, telecommunications, cyber support, retail, and manufacturing across 17 states and Washington, DC.
Moreover, two US nationals, from Pennsylvania and Texas, have been arrested. They and 12 others, including 10 people based in China, are charged with wire fraud, money laundering, and identity theft in Ohio.
Two of the defendants have not been named, and the charges are allegations; all defendants are presumed innocent.
From 2019 to around July 2025, the workers used fake or stolen ID papers to apply, the indictment states. Online tools made it appear as if they were working from inside the US.
They also paid helpers in the US to run so-called laptop farms. These helpers kept work laptops at home and set them up so the workers could use them from abroad. They then moved the payments to accounts run by North Korea, prosecutors said.
In a separate operation in September, the FBI searched more than 40 homes in Texas suspected of being laptop farms. It seized approximately 187 laptops and other devices.
"North Korea’s rogue regime uses its pervasive IT worker schemes to raise revenue for various illicit purposes, including the development of weapons that could ultimately target the United States or its allies," said John Eisenberg, the assistant attorney general for national security.
The FBI also issued a new warning to companies as North Korean workers are increasingly hiring Americans to help them avoid detection, and some pass whole jobs on to other foreign nationals, it said.
Security firm CrowdStrike, which helped the FBI, tracks the group as ‘Famous Chollima’. North Korean hackers have also built their own AI tools for attacks, and hidden malware in fake software packages aimed at coders.
Story by Ana-Maria Stanciuc
Editor-in-Chief
I am the Editor in Chief for TNW, covering technology not as a parade of launches and valuations, but as a system of influence, persuasion, and change. I write about startups, venture capital, digital policy, and Europe ecosystem, with an eye on the larger story beneath them: who gets to build the future, who profits from it, and how Europe is learning to speak in a louder voice of its own. Before moving into senior editorial leadership, I've built my career for over +10 years across journalism, storytelling, content strategy, SEO, and digital publishing, with experience in SaaS, hospitality, art, and culture.
Get the TNW newsletter
Get the most important tech news in your inbox each week.
Email address
Subscribe
Website
Thanks! Check your inbox to confirm your subscription.
By subscribing you agree to our Privacy Statement.