DOJ Charges Two in North Korean Laptop Scheme That Hit Over 70 US Employers

Two Arrested in North Korean Crypto Theft Scheme

The US Department of Justice has announced the arrest of two individuals in connection with a scheme that prosecutors say was linked to North Korean state-sponsored hacking operations. The indictment, filed in Ohio, alleges the group compromised laptops belonging to more than 70 US employers.

Prosecutors say the operation generated approximately $3 million in cryptocurrency, which was transferred using crypto wallets tied to the suspects. The case was made public on October 13, 2026.

Key numbers from the indictment

• More than 70 US employers were affected
• About $3 million in cryptocurrency was reportedly stolen
• Two individuals were arrested and charged

What the indictment describes

The Ohio indictment provides details about how cryptocurrency was transferred as part of the scheme. According to the charges, the hackers gained access to compromised laptops and used them to conduct unauthorized operations on behalf of what prosecutors describe as a North Korean-linked entity. The indictment specifically mentions crypto asset transfers, but does not disclose the specific blockchain networks or wallet addresses involved.

What is still unclear

The two arrested individuals have not yet entered a plea. The full scope of the operation, including which specific companies were targeted and how much data may have been exfiltrated beyond cryptocurrency, has not been publicly detailed. It is also not yet clear whether additional suspects are being pursued.

Why this matters

North Korean-affiliated hacking groups have long been associated with cryptocurrency theft, making this one of the more significant corporate-targeted schemes revealed by federal prosecutors. The fact that more than 70 US employers were implicated highlights how such operations can extend across a wide range of industries through compromised laptops and insider access.

Sources

• The Defiant