DOJ Dismantles North Korean "Laptop Farms" in Texas, Seizing $3 Million in Illicit Funds
The U.S. Department of Justice has dismantled sophisticated "laptop farms" operated by North Korea in Texas, used to generate millions in revenue through remote worker scams.

Federal authorities have cracked down on a significant illicit financial scheme orchestrated by North Korea, dismantling "laptop farms" that generated approximately $3 million in revenue for the rogue state. The operation, which involved raids on over 40 residences across Texas in September, targeted a network of individuals employed to work remotely for U.S. companies.
These "laptop farms" were essentially hubs where North Korean operatives used stolen identities and credentials to secure remote employment with American businesses. The individuals working from these locations would then perform legitimate tasks for their employers, but the income generated was ultimately funneled back to the North Korean regime, circumventing international sanctions.
The Department of Justice's investigation revealed that the scheme involved a complex web of fraudulent activities, including the use of virtual private networks (VPNs) and other anonymizing technologies to mask the true location and identity of the workers. This allowed North Korean operatives to pose as U.S. residents and gain access to employment opportunities that would otherwise be unavailable.
This crackdown is part of a broader effort by U.S. law enforcement to disrupt North Korea's ability to fund its weapons programs and other illicit activities through cybercrime and financial fraud. The regime has a well-documented history of leveraging its skilled hackers and operatives for financial gain on the global stage.
The raids resulted in the seizure of numerous laptops, hard drives, and other electronic devices, which are now being analyzed for further evidence. The investigation is ongoing, and authorities are working to identify all individuals involved in the scheme, both those operating the farms and those who may have facilitated the fraudulent employment.
This operation highlights the persistent threat posed by North Korean state-sponsored cyber operations, which continue to evolve and adapt to evade detection and sanctions. The use of "laptop farms" represents a particularly insidious method of generating revenue, as it exploits legitimate employment channels and unsuspecting U.S. companies.
While the exact number of individuals employed through these farms has not been disclosed, the scale of the operation, involving over 40 residences, suggests a significant number of remote workers were involved. The DOJ's success in dismantling these farms is a critical blow to North Korea's ability to generate foreign currency through these deceptive means.
The Department of Justice has charged 14 individuals in connection with the North Korean remote work scheme, seizing 187 computers. This operation, dubbed 'Lonestar Roundup,' specifically targeted "laptop farms" in Texas used to facilitate North Korean IT workers operating abroad. The indictment details how U.S. citizens allegedly assisted by providing identities for remote workers, maintaining laptops, and processing payments, with approximately $3 million in illicit pay collected.