FBI Investigating North Korean Hired by U.S. Government Agency

While the specifics of how the individual was hired remain unclear, North Korea is known for orchestrating extensive campaigns to fraudulently obtain employment with private companies and multinational corporations. This case represents a rare confirmed instance of a sanctioned North Korean working for a government entity.

It is estimated that thousands of North Korean IT workers have secured positions with U.S. and European organizations in recent years by exploiting vulnerabilities in hiring processes. These workers allegedly use fraudulent identities to obtain remote roles, with their earnings being funneled back to the regime. Furthermore, there are concerns that these individuals may also steal intellectual property and other sensitive data, potentially using it for extortion.

Despite stringent vetting and security clearance protocols, which have largely prevented the regime's hackers from infiltrating government systems, incidents have occurred. In 2024, the Justice Department filed charges against a Maryland man for allegedly assisting a North Korean hacker in posing as an American to secure a remote contractor position with the Federal Aviation Administration (FAA).

The FBI has not yet responded to requests for comment, and details regarding which federal agency was affected, and whether any data or funds were compromised, are not publicly available. The U.S. has consistently warned about the risks associated with North Korean IT worker schemes and has implemented enforcement actions and sanctions targeting networks operating from North Korea, as well as those in Russia and China, and U.S.-based facilitators who provide remote work infrastructure.