The Justice Department announced October 13, 2026 coordinated actions against North Korean remote IT worker schemes that it says affected more than 70 U.S. companies. They include an indictment, two arrests, searches of multiple known or suspected “laptop farms” in Texas under “Operation Lonestar Roundup,” and the seizure of about 187 computer devices.
DOJ says North Korea uses remote IT work for U.S. companies to raise revenue for its regime. The department says the schemes threaten employers’ IT systems and data and leave many victims of identity theft, because workers use stolen identities. U.S. Attorney David Toepfer of the Northern District of Ohio urged U.S. companies to stay vigilant in their hiring practices.
The charges are allegations. Anyone hiring remote IT staff should verify identity and location carefully, as the actions show how stolen identities are used to get access inside American firms.