# North Korean IT worker employed by US government agency, FBI reveals FBI investigates how a North Korean national was hired at a federal institution using fraudulent identity. - **Source:** [cybersecurity | TechCrunch](https://brifing.si/source/73fbb25c-5e90-44c9-9a24-7906dc3436cd) - **Published:** 2026-08-11 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/4e57be96-b9c2-4552-beaa-afb477e5563e ## FBI's shocking discovery The FBI uncovered that a North Korean citizen worked remotely for a US federal government agency. Confirmed by a senior FBI official at a July 2026 conference in Washington, this rare incident exposes regime-linked individuals infiltrating state institutions. According to Federal News Network, it remains unclear which agency was affected or whether data was stolen. ## Regime's long-term strategy North Korea has been running campaigns for years to place workers in private companies and multinationals using fake identities. Thousands of North Korean IT workers are estimated to have secured jobs in US and European organizations recently. These employees funnel wages back to the regime while stealing intellectual property and collecting data for extortion. ## Attempts to infiltrate government In 2024, a Maryland man was convicted of helping a North Korean hacker pose as an American to get a remote job with the FAA. Despite strict security measures, attempts by regime-linked individuals to infiltrate government continue. US authorities have imposed sanctions on networks operated from Pyongyang and neighboring countries. ## Cryptocurrency theft connection Despite global sanctions, North Korea resorts to crypto thefts to fund its nuclear program. Blockchain analysts report the Kim regime was responsible for 76% of global crypto thefts in 2025, netting at least $2 billion despite bans. Income from IT workers supplements these illicit funds. ## US warnings and countermeasures US officials have long warned about risks posed by North Korean IT workers. Sanctions have increased against networks operating from Russia and China, and against US facilitators providing laptop fleets. However, this latest incident shows existing measures might be insufficient. ## Remote work security vulnerabilities The post-pandemic remote work boom introduced new security risks. Malicious actors exploit hiring process weaknesses using fake references and identities. For government agencies, this poses national security threats requiring urgent attention to vetting protocols. ## Circumventing financial sanctions Despite being banned from global finance systems, North Korea continues fund transfers through complex methods. IT worker income combined with crypto thefts enhances the regime's sanction-evasion capacity. The US Treasury is developing new measures to disrupt these revenue streams. ## National security alarm This case underscores the need for government agencies to review cybersecurity protocols. Tightening identity verification for remote workers and implementing continuous monitoring are critical. The FBI investigation reveals the sophistication of North Korea's cyber operations, putting national security experts on high alert. ## Sources covering this story - https://techcrunch.com/2026/08/11/north-korean-remote-it-staffer-worked-for-us-government-agency-says-fbi/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._