Federal Action Targets North Korean Remote IT Schemes Infiltrating U.S. Businesses
The U.S. Department of Justice announced coordinated enforcement actions targeting government-backed schemes from North Korea that use remote information technology workers to fund the foreign regime. Federal authorities executed searches, filed criminal charges, and seized computer hardware involved in operations affecting American businesses.
The actions include an indictment filed in the Northern District of Ohio, two arrests, and searches of multiple suspected laptop farms in Texas. Authorities seized approximately 187 computer devices used in the remote work operations.
Indictment and Arrests in Ohio
The U.S. Attorney’s Office for the Northern District of Ohio announced the arrests of two U.S. nationals, Michael James Bostelle of Pennsylvania and Juan Cecilio Pena Carrillo of Texas. Both individuals face a four-count indictment charging wire fraud, money laundering, and identity theft.
According to prosecutors, the defendants and their co-conspirators engaged in a multi-year fraud scheme from 2019 to July 2025. The operation generated more than $3 million in revenue by helping foreign workers secure remote IT positions at U.S. companies using stolen or fabricated identity documents.
Source: U.S. Department of Justice
Operation Lonestar Roundup in Texas
Between September 21 and September 25, the FBI conducted law enforcement searches at more than 40 residences in Texas operating as laptop farms. U.S.-based facilitators at these locations received, housed, and configured company-issued laptops, installed remote-access software, and transferred earnings to accounts controlled by North Korea.
Investigators stated that victim employers included companies across the health care, communications, cyber support, retail, and manufacturing sectors. Over 70 employers across Ohio, seventeen additional states, and the District of Columbia were impacted by the scheme.
What This Means for Employers and Workers
Federal officials issued warnings urging employers to remain vigilant in their hiring practices and review remote onboarding procedures. Companies can check indicators such as specific fraudulent email accounts identified by investigators, including bright.star.me208@gmail.com and michaelb860102@gmail.com, to detect potential unauthorized access.
The FBI published a public service announcement containing detailed mitigation guidance for companies facing these threats. Cybersecurity firms like CrowdStrike also monitor customer networks for related activity and collaborate with law enforcement.
Consulting with a legal professional can help businesses navigate hiring compliance, data security protocols, or employment screening requirements.
What this means: our conclusions
- What to doStricter Remote Hiring Verification
Employers may need to implement rigorous identity verification and background checks for remote contractors and IT staff to prevent infiltration.
- What to watchExpanded Federal Scrutiny
The coordinated enforcement signals that federal agencies are aggressively prioritizing domestic enablers of foreign state-sponsored cyber threats.
- RiskIncreased Legal Risks for Facilitators
U.S. residents who host laptop farms or assist foreign workers in bypassing remote work controls face severe criminal charges including wire fraud and money laundering.
- What to doReview Hiring Indicators
Companies should check applicant records against federal advisories and known fraudulent email addresses to protect internal networks and data.
| Action Type | Location | Details |
|---|---|---|
| Indictment & Arrests | Northern District of Ohio | Two U.S. nationals arrested; charges include wire fraud and identity theft. |
| Laptop Farm Searches | Northern District of Texas | Over 40 residences searched; approximately 187 devices seized. |
| Impacted Businesses | Ohio & Seventeen States | More than 70 U.S. companies affected across multiple industrial sectors. |
Source: U.S. Department of Justice
- Public Service Announcement ic3.gov
- indictment justice.gov
- June 2025 justice.gov
- November 2025 justice.gov
- April 2026 justice.gov
This article is general information based on U.S. Department of Justice and court or agency records available at publication time. It is not legal advice; laws and deadlines differ by state and by case. Published October 14, 2026.
Source: U.S. Department of Justice
FTC Halts Digital Forensics Corporation Over Alleged $60 Million Sextortion Scam
A federal court has temporarily stopped Digital Forensics Corporation and its CEO from allegedly defrauding sextortion victims out of at least $60 million.
Lawyers in nearby states
No attorneys in Ohio are listed in our directory yet. Lawyers are licensed state by state, so before hiring, check that the attorney is admitted to practice in Ohio.