US disrupts North Korean IT worker "laptop farm" scheme in 16 states

The U.S. Department of Justice announced a coordinated nationwide action (Oct 2024–Jun 2025) that disrupted a DPRK-run "laptop farm" scheme in which North Korean operators, using stolen or AI-generated fake U.S. identities and shell companies, obtained remote IT jobs at over 100 U.S. firms to siphon salaries, exfiltrate sensitive data (including ITAR-regulated military technology), and launder proceeds; the operation involved indictments and arrests, seizure of 29 bank accounts, 21 fake websites and ~200 computers across 16 states, estimated $5M in illicit revenue and $3M in company damages, and rewards for remaining fugitives.