Breaches and incidentsBriefChecked against a primary source
Operation Lonestar Roundup: FBI searches 40+ DPRK IT-worker laptop farms in Texas
DOJ: between 21 and 25 Sep the FBI searched or acted at more than 40 Texas residences suspected of hosting laptop farms.
- Disclosed
What happened
- DOJ: between 21 and 25 Sep the FBI searched or acted at more than 40 Texas residences suspected of hosting laptop farms; about 187 laptops and KVM devices seized. A Northern District of Ohio indictment charges 14 (10 China-based), and two US nationals were arrested. More than 70 US companies affected; about $3M generated 2019 to July 2025.
- Technique: remote North Korean IT workers using US-hosted laptops and KVMs to pose as domestic employees.
- Attribution: DOJ (DPRK IT worker scheme). Allegations unproven.
- Response: FBI PSA with employer guidance (PSA261013).
Sources
- https://www.justice.gov/opa/pr/justice-department-announces-coordinated-actions-combat-north-korean-remote-it-worker
- https://www.helpnetsecurity.com/2026/10/14/north-korean-it-workers-laptop-farms-arrests/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.