A federal operation exposed the scale of a remote-worker scheme that placed North Korean personnel behind apparently legitimate identities, employer-issued laptops and trusted corporate accounts.
What changed
The U.S. Department of Justice announced searches of more than 40 Texas residences and the seizure of 187 laptops and KVM devices used in laptop farms supporting North Korean remote IT workers. Reporting said at least 70 U.S. companies were infiltrated.
Public record through 2026-10-15. Source references count citations across published briefings, including repeated sources. Explore the record and its limits →
What We Publish / What We Sell
D
Free · Public
The Daily
Five evidence-backed selections for security leaders, every weekday.
These are Security.io editorial scores, not external telemetry. Exposure estimates breadth, Urgency reflects the available decision window, and Business consequence reflects plausible enterprise impact. Exposure: 88. Urgency: 96. Business consequence: 90. Focus the chart and use the up and down arrow keys for detail. Source: Security.io editorial assessment based on the five selected source sets.