{
  "id": 14340504,
  "title": "Justice Department says North Koreans have infiltrated dozens of U.S. companies",
  "url": "https://urgent.news/2026/10/14/justice-department-says-north-koreans-have-infiltrated-dozens-of-u-s",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-14T01:30:42.000Z",
  "source": {
    "name": "TechCrunch",
    "slug": "techcrunch",
    "url": "https://techcrunch.com/2026/10/13/justice-department-says-north-koreans-have-infiltrated-dozens-of-u-s-companies/"
  },
  "original_language": "en",
  "account": "The U.S. Department of Justice has warned that hackers linked to North Korea are increasingly relying on Americans to help infiltrate and steal data from U.S. companies. Prosecutors have indicted and arrested at least two individuals, and conducted searches of over 40 laptop farms across Texas. The computers used in these alleged hacks were reportedly shipped to unsuspecting American companies by new employees, who had used stolen U.S. citizen identities to gain employment.\n\nOver 180 seized computers are believed to have been used by North Korean hackers to remotely access and steal sensitive data from American companies. The DOJ identified at least 70 U.S. companies across various sectors, including healthcare, cyber support, retail, communications, and manufacturing, that have been targeted. The stolen funds from these intrusions reportedly equate to around $3 million.\n\nNorth Korean hackers are reportedly leveraging American facilitators to bypass detection by private sector security measures and overcome legal challenges. They employ tactics like creating convincing email addresses, fake LinkedIn profiles, and extensive online identities to conceal their activities. The FBI has reported that thousands of North Korean-controlled IT workers are employed by Western companies, posing a significant national security and intellectual property theft threat.\n\nThis latest wave of enforcement actions is part of a broader campaign targeting North Korean activities in the U.S. The regime has been using this scheme to allow North Koreans to earn wages while stealing sensitive information and intellectual property. Victim companies are then allegedly extorted into paying the hackers further. The remote IT workers' scheme is one of several revenue streams for the North Korean regime, which is also believed to have stolen at least $2 billion in crypto during 2025 alone. Experts estimate the number of hacked companies and stolen crypto to be significantly higher than reported.",
  "summary": "U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies and Pyongyang.",
  "key_points": [
    "North Korean hackers infiltrate U.S. companies using American facilitators.",
    "DOJ indicted and arrested at least two individuals involved in the hacks.",
    "Over 180 seized computers used in $3 million worth of data thefts."
  ],
  "editors_take": "By exploiting the trust of American employers through stolen identities, North Korean hackers have turned domestic workforces into unwitting conduits for large-scale intellectual property theft and financial extortion.",
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "Techmeme",
        "title": "The FBI says it worked with CrowdStrike to dismantle 40+ laptop farms across Texas used to help North Koreans get remote US tech jobs under stolen identities (Dustin Volz/New York Times)",
        "url": "https://urgent.news/2026/10/13/the-fbi-says-it-worked-with-crowdstrike-to-dismantle-40-laptop-farms",
        "published": "2026-10-13T21:05:02.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}