FBI Investigates North Korean IT Worker Hired by U.S. Federal Agency

Investigation into Federal Agency Hiring

The FBI is reportedly investigating the hiring of a North Korean national by an unnamed U.S. federal government agency. This investigation was confirmed by a senior FBI official at a conference in Washington, D.C., and first reported by Federal News Network. The specific agency involved and whether any data or funds were compromised remain undisclosed.

North Korean IT Worker Schemes

North Korea is known for coordinated campaigns to fraudulently secure employment at private organizations and multinational companies. Thousands of North Korean IT workers are believed to have gained remote positions with U.S. and European organizations by using false identities. The primary objectives are to funnel wages back to the North Korean regime and to steal intellectual property or other data, which can then be used for extortion.

Previous Incidents and Warnings

While strict vetting processes have largely prevented North Korean hackers from infiltrating government agencies, this is not without precedent. In 2024, the Justice Department charged a Maryland man for assisting a North Korean hacker who posed as an American to secure a remote contractor position with the Federal Aviation Administration. The U.S. government has consistently warned about the risks posed by these schemes and has implemented enforcement actions and sanctions against the networks operating from Pyongyang, Russia, and China, as well as American facilitators.

Funding the Regime

North Korea relies on illicit activities, including hacks and cryptocurrency thefts, to fund its globally sanctioned nuclear weapons program. Blockchain forensic firms estimate that the Kim Jong Un regime is responsible for 76% of cryptocurrency thefts, reportedly netting at least $2 billion in 2025 despite international sanctions.