DOJ North Korean IT Worker Laptop Farm Crackdown (October 2026)
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·2GEY3s…SFm1Summary
On October 13, 2026, the U.S. Department of Justice unsealed a 58-page federal indictment charging two U.S. citizens and ten China-based defendants with wire fraud conspiracy, money laundering conspiracy, conspiracy to commit identity theft, and aggravated identity theft in connection with a multi-year scheme to place North Korean IT workers at more than 70 U.S. companies. The scheme, which ran from approximately 2019 through 2025, generated at least $3 million in wages for overseas North Korean operatives and allegedly funneled proceeds — in part through cryptocurrency — to the DPRK government's sanctioned weapons programs. The FBI conducted Operation Lone Star Roundup, searching more than 40 Texas residences and seizing approximately 187 laptops and associated devices.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Timeline(13 events)
1 January 2019
Alleged scheme begins: North Korean IT workers start obtaining fraudulent remote employment at U.S. companies through laptop farms and stolen/fabricated identities (approximate start date per indictment).
DOJ Office of Public Affairs1 March 2024
DOJ launches 'DPRK RevGen: Domestic Enabler Initiative' targeting domestic and foreign collaborators in North Korea's revenue generation network.
Alston Privacy blog1 August 2024
DOJ charges Nashville man for operating laptop farm assisting North Korean IT workers at U.S. businesses.
DOJ / GlobalSecurity11 December 2024
DOJ indicts 14 North Korean nationals for fraudulent remote IT worker schemes.
White Collar Law Blog24 January 2025
DOJ indicts five individuals in a related North Korean IT worker scheme that generated at least $866,255 from 10 U.S. companies.
The Hacker News30 June 2025
U.S. government targets 29 suspected laptop farms across 16 states in a separate coordinated takedown of North Korean remote worker operations.
TechCrunch24 July 2025
A laptop farmer in an earlier related North Korean IT worker case is sentenced to 8.5 years in prison.
The Register25 July 2025
Alleged scheme ends, per indictment timeline (approximate end date).
DOJ Office of Public Affairs12 March 2026
OFAC designates six individuals and two entities for facilitating DPRK IT worker fraud schemes generating nearly $800 million in 2024; 21 cryptocurrency addresses added to SDN list.
The Block1 July 2026
U.S. State Department issues formal alert to countries and companies regarding North Korean IT worker infiltration schemes.
U.S. Department of State21 September 2026
FBI begins Operation Lone Star Roundup: searches of 40+ Texas residences suspected of operating as laptop farms, seizing approximately 187 laptops and KVM devices over four days (through September 25).
DOJ Office of Public Affairs1 October 2026
Federal grand jury in the Northern District of Ohio returns indictment charging Michael James Bostelle, Juan Cecilio Pena Carrillo, ten China-based defendants, and two sealed defendants.
CyberScoop13 October 2026
DOJ unseals indictment; Bostelle and Carrillo are arrested; DOJ and FBI hold public press conference announcing coordinated actions.
DOJ Office of Public AffairsDecision Log
- slot 456616672 · hash Dsqom3HgNdgxsMWNbRj7R2ybeBvqrABxAGZwbdxoQknT
This investigation is cryptographically anchored to the Solana blockchain (1 decision). 0 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 10/13/2026, 11:04:14 PM
last updated: 10/13/2026, 11:04:14 PM
avoid.net — verified advice for a post-truth world