Back Nbcdfw North Korean IT network used to penetrate U.S. companies in Texas 'dismantled': DOJ
A remote IT worker network that was working to help fund North Korean weapons programs has been dismantled, according to the FBI .
Two people were arrested, and approximately 187 laptops and computer devices from more than 70 different companies were seized in connection with this investigation. The two people arrested are U.S. nationals Michael James Bostelle of Pennsylvania and Juan Cecilio Pena Carrillo of Texas. They're indicted on wire fraud, money laundering, and identity theft.
Watch NBC 5 free wherever you are
The FBI also announced indictments against Chinese nationals.
Investigators said it allowed North Korean IT workers to access those companies using stolen or falsified American identities.
Create a free account with NBC 5 DFW to save articles and videos.
"In North Texas alone, we seized more than 100 laptops," Joseph Rothrock, Special Agent in Charge, FBI Dallas, said.
Rothrock said they've seen IT workers hired for software engineer and web developer positions.
"In turn, those state organizations collect an estimated 85 to 90% of the revenue earned by the IT workers. The North Korean government uses this revenue to advance its weapons of mass destruction, ballistic missile programs, intelligence program, and nuclear program," Joseph Rothrock said
The latest news from around North Texas.
From fairgrounds to forever: A State Fair of Texas love story
Local atty. talks ride safety after man dies falling off roller coaster in GA
North Korea has operated the network for years. In 2024, the Department of the Treasury estimated the network generated over $800 million from U.S. companies that went to fund North Korean weapons of mass destruction programs and other ballistic missile systems, according to U.S. Attorney for the Northern District of Texas Ryan Raybould.
"If you think it’s appropriate to host 30 to 40 laptops in your family room and then claim to the United States government that you didn’t know what you were doing was wrong, that argument is completely gobbledygook," Ryan Raybould said. "The national security implications are profound. Every dollar that flows to North Korea through these schemes help fuels weapons development."
The FBI is now reaching out to affected local companies, and Raybould said he expects to indict the facilitators soon.
The indictment alleges the crimes happened from 2019 to July 2025.
The companies were in health care, communications, cyber support, retail, and manufacturing sectors.
In September, the FBI searched more than 40 houses in Texas for electronic devices.
Investigators discovered that the DPRK operatives allegedly used a network of fraudulent email accounts to facilitate their criminal activity. The following accounts were among those identified as being used in these schemes:
Employers are encouraged to add these accounts to the list of indicators they use to identify and disrupt DPRK IT worker employment.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
