The FBI is investigating a North Korean remote IT worker recently discovered working for an unidentified U.S. federal agency, although the worker’s role, duration of access, and possible exposure of sensitive data remain unknown. The case extends a fraudulent-employment campaign in which DPRK personnel use stolen or fabricated identities, third-party facilitators, laptop farms, and increasingly AI-generated documents and deepfakes to obtain remote jobs. Such employment generates substantial revenue for North Korea’s weapons programs and can also provide access to proprietary data, credentials, and government-connected systems. Experts urged stronger identity verification and risk-based vetting for contractors and support personnel with sensitive access.