DOJ Shuts Down Texas Laptop Network Aiding North Korean IT Workers
Federal authorities in Texas disrupted an illicit laptop-hosting ring that enabled DPRK personnel to infiltrate American companies using falsified identities.
At a glance Enforcement action
- What happened
- Federal agents dismantled an illicit Texas laptop-hosting network that helped North Korean IT workers access U.S. corporate systems using stolen identities.
- Why it matters
- The action cuts off key domestic infrastructure used by North Korean operatives to bypass corporate identity screening.
- Who is affected
- U.S. corporations targeted by fraudulent remote workers and the disrupted laptop-hosting network.
- What's next
- No next step announced.
- Primary source
- U.S. Department of Justice: Operation Lonestar Roundup dismantles North Korean IT worker network used to penetrate U.S. companies in Texas
Key points
- Federal authorities disrupted a Texas laptop-hosting network assisting North Korean IT workers 1.
- The illicit network relied on stolen or falsified American identities to access U.S. corporate systems 1.
- The action was led by U.S. Attorney Ryan Raybould and FBI Dallas Special Agent in Charge R. Joseph Rothrock under Operation Lonestar Roundup 1.
Federal law enforcement authorities have dismantled an illicit laptop-hosting network in Texas designed to help Democratic People's Republic of Korea (DPRK) IT workers unlawfully penetrate domestic corporate systems 1.
United States Attorney for the Northern District of Texas Ryan Raybould and FBI Dallas Special Agent in Charge R. Joseph Rothrock announced the enforcement action, designated Operation Lonestar Roundup, on Oct. 13 1. According to the prosecutors and federal agents, the disrupted operation enabled North Korean remote workers to gain unlawful access to private U.S. corporate systems 1.
Operation Lonestar Roundup
Investigators established that the dismantled network relied on stolen or falsified American identities to facilitate illicit employment schemes 1. Overseas personnel affiliated with North Korea utilized these fraudulent profiles alongside dedicated domestic laptop-hosting infrastructure to obscure their real identities while interacting with targeted U.S. enterprises 1. Federal authorities stated that the infrastructure served specifically to bypass standard screening by establishing an operational footprint tied directly to domestic hardware 1.
The operation was led jointly by the U.S. Attorney's Office for the Northern District of Texas and the FBI Dallas Field Office 1. Federal officials confirmed that the network had been used systematically to penetrate multiple U.S. companies 1. At the time of writing, broader digital asset markets were steady, with Bitcoin trading near $83,380 and Ethereum at $2,515.
Federal prosecutors and FBI leadership indicated that federal agents have officially disrupted the core equipment and hosting apparatus tied to the illicit scheme 1. Authorities confirmed that the operation eliminated a principal access pathway exploited by the foreign IT network across the Northern District of Texas 1.
Sources
- [1] Operation Lonestar Roundup dismantles North Korean IT worker network used to penetrate U.S. companies in Texas — U.S. Department of Justice, October 13, 2026
Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.
The Daily Brief, in your inbox at 07:00 ET
Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.
Get the big crypto stories first
A few alerts a day at most: major breaking news and the morning brief. Switch off anytime.
Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.