Share on LinkedInShare on LinkedIn

ARTICLE · 28 AUGUST 2026

Hidden In Plain Sight: Labor, Employment And Cybersecurity Risks Of DPRK IT Worker Infiltration

Foreign operatives from North Korea are increasingly using stolen identities, AI technology, and facilitator networks to fraudulently obtain remote IT positions at U.S. companies, creating significant cybersecurity, sanctions, and workforce risks. This emerging threat requires employers to implement robust screening controls while carefully balancing fraud detection with antidiscrimination, immigration, and data privacy obligations.

United StatesTechnology

Highlights

  • Information technology (IT) workers from North Korea (DPRK or Democratic People's Republic of Korea) are increasingly using stolen or synthetic identities, artificial intelligence and facilitator networks to fraudulently obtain remote positions at U.S. companies, creating cybersecurity, sanctions and workforce risks.
  • Employers must balance efforts to identify and respond to suspected fraudulent workers with antidiscrimination, immigration, employment and data privacy obligations.
  • Companies should take a cross-functional approach that coordinates human resources, legal, IT and security teams to strengthen hiring controls, remote-access security, sanctions screening, vendor oversight and incident response.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from