US seizes 187 computers used by North Korean IT workers in Texas raids

what happened

US law enforcement has confiscated 187 computer devices that North Korean IT workers used to land remote jobs at American companies and send the income back to Pyongyang. According to the Justice Department, as reported by RTTNews citing dpa-AFX, the equipment was found during searches of several known or suspected laptop farms in Texas, in an effort named Operation Lonestar Roundup.

In Ohio, Michael James Bostelle of Pennsylvania and Juan Cecilio Pena Carrillo of Texas were arrested. Prosecutors in the Northern District of Ohio charged them on four counts covering wire fraud, money laundering and identity theft. Investigators say the scheme ran from 2019 to July 2025 and brought in more than $3 million in revenue. The indictment also names 10 co-conspirators based in China, while the identities of two other defendants remain sealed.

According to the filing, the workers used stolen or forged identity documents, virtual private networks and proxy servers to pass themselves off as people living in the United States. Accomplices in the country received laptops issued by victim employers, set them up, installed remote-access tools and forwarded pay to accounts controlled from Pyongyang. More than 70 employers were affected across health care, communications, cyber support, retail and manufacturing, in Ohio, 16 other states and the District of Columbia.

The FBI ran its operation between September 21 and 25 and carried out searches and other actions at more than 40 residences in Texas. CrowdStrike tracks the group as Famous Chollima. Officials said the regime uses these schemes to raise money for weapons programs that could ultimately threaten the US and its allies. The FBI said 14 people have been charged, two arrests were made, nearly 190 devices were seized, and it has published a public advisory with mitigation steps for companies.

why it matters

For markets, the case is mainly a reminder of sanctions and cyber exposure. Firms that hire remote technical staff may need tighter identity checks, and the FBI's published guidance puts pressure on businesses to review hiring procedures and control over company hardware.

tags