FBI Dismantles 40 North Korea Laptop Farms, Seizes 200 Devices
Updated
Updated · The New York Times · Oct 13
FBI Dismantles 40 North Korea Laptop Farms, Seizes 200 Devices
3 articles · Updated · The New York Times · Oct 13
Summary
More than 40 laptop farms in Texas were dismantled last month as the FBI moved against a U.S.-based network accused of helping North Koreans land remote tech jobs.
Nearly 200 devices were seized in what officials called one of the biggest U.S. efforts yet to choke off a revenue stream that has generated billions for Pyongyang’s nuclear and ballistic weapons programs.
Ohio indictments unsealed Tuesday charged two Americans and 10 China-based North Koreans with identity theft tied to the scheme; prosecutors said it defrauded 70 companies of more than $3 million from 2019 to 2025.
Thousands of state-controlled North Korean IT workers are believed to be infiltrating U.S. and allied firms, making the job scams a primary funding source alongside cryptocurrency theft, U.S. officials said.
CrowdStrike helped identify the network, and the operation became an early test of the FBI’s new cyber strategy of closer private-sector coordination to disrupt hostile activity.
With Texas laptop farms dismantled, what highly sensitive corporate data did these fake remote workers exfiltrate before the FBI finally intervened?
How did North Korean operatives secretly infiltrate 70 American companies, and could your remote coworker actually be funding a nuclear weapons program?
As rogue states exploit remote hiring to fund missiles, what terrifying deepfake tactics will they use next to bypass corporate security?
The 2026 Texas Laptop Farm Raids: How North Korea’s AI-Powered Hiring Fraud Funneled $800 Million Through U.S. Companies
Overview
Between 2019 and 2026, North Korean operatives used AI-altered profiles, deepfake tools, and stolen U.S. credentials to apply for remote IT jobs. Domestic facilitators, recruited and managed by individuals like Tey Michael Nolte, hosted corporate laptops in private U.S. residences, allowing overseas workers to access company networks while appearing local. Federal investigators and CrowdStrike identified these schemes by spotting behavioral and technical anomalies, leading to major FBI raids on Texas 'laptop farms' and the arrest of key accomplices. These operations defrauded dozens of U.S. companies, compromised American identities, and generated millions in illicit revenue for North Korea.