How it unfolded 0 developments, newest first · click a bar or a number to jump

show all

1. backgroundYesterday

   Law enforcement notes part of broader pattern; nearly 30 farms raided the previous year — The DOJ characterized this action as part of a long-running operation to disrupt laptop farms across the U.S. and identify American co-conspirators. Nearly 30 laptop farms across 16 states were raided by U.S. law enforcement the previous year. Several Americans have already been convicted and sentenced to years in prison for running laptop farms and coordinating with North Koreans on the IT worker scheme.

2. backgroundYesterday

   Prosecutors reveal modus operandi: Americans hosted laptops and provided stolen identities — Bostelle and Pena allowed their names and personal information to be used to facilitate the North Korea-directed operation, receiving proceeds from the scheme in return. The Americans' actions included receiving and hosting laptops belonging to U.S. victim companies at their homes to make it appear as if the North Koreans were legitimate employees operating in the U.S. From 2019 to 2026, they also helped IT workers obtain and use fake identification documents to gain employment or verify bank accounts.

3. backgroundYesterday

   Indictment reveals role of American coordinator Trey Michael Nolte and recruitment structure — Trey Michael Nolte, a U.S. national, was named in the indictment but not charged. Prosecutors described him as central to the operation: he allegedly recruited, managed and trained Bostelle and other Americans; ran a shell company that facilitated the scheme; communicated with Chinese and North Korean nationals; received work laptops from U.S. companies; and laundered paychecks back to North Korea. Nolte directed Pena and at least four other Americans in the scheme.

4. backgroundYesterday

   DOJ details scope of fraud: $3 million generated, 70+ companies impacted, 25 identities stolen — According to the unsealed indictment, the scheme impacted more than 70 U.S. companies across 17 states, compromised the identities of 25 Americans, caused false information to be sent to multiple U.S. government agencies, and generated at least $3 million in revenue for overseas IT workers. Affected sectors included healthcare, cybersecurity, retail, and manufacturing.

5. backgroundYesterday

   DOJ announces arrests and unseals indictment against North Korean IT worker scheme operatives — The Department of Justice announced the arrests of two Americans—Michael James Bostelle of Pennsylvania and Juan Ceclilio Pena Carrillo of Texas—on charges of wire fraud, money laundering, and identity theft. The indictment also charged ten China-based operators: Sun Sheng Ming, Pei Li Guang, Weng Shou Cheng, Han Guo Bin, Wang Jian Jun, Sheng Zhang Kun, Zhang Wei Ping, Zhang Li Ping, Yu Yang, and Jin Long.

6. backgroundSep 21

   FBI conducts coordinated raids on Texas laptop farms — Between September 21 and September 25, the FBI conducted searches and took action at more than 40 residences in Texas suspected of operating as "laptop farms" for North Korean IT workers. Law enforcement seized approximately 187 laptops and other devices used to carry out the scheme.