DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Christina Marie Chapman laptop farm scheme (more than 300 U.S. companies)

Date (as written)
October 2020 to October 2023
Year
2020
Country
United States
Actors (as written)
overseas DPRK IT workers with facilitator Christina Marie Chapman
Tags (as written)
IT workers; identity theft; laptop farm
Dollar figures (as written)
at least $17.1 million of revenue for the North Korea; $6.8 million (earlier calculation); money judgment in the amount of $176,850; $17.1 million; more than $17 million; $17 million

Source entries (2)

US court filing via CourtListener RECAP: United States v. CHAPMAN

Christina Chapman laptop farm in Arizona supporting North Korean IT workers at 309 U.S. companies and 2 international companies · From in and around October 2020, until on or about October 26, 2023
The coconspirators compromised the identities of 68 U.S. persons, creating false tax liabilities for these victims; applied for or obtained remote jobs at 309 U.S. companies and 2 international companies; and caused false information to be conveyed to DHS on more than 100 occasions. The IRS Special Agent who investigated the case estimated that the scheme generated at least $17.1 million of revenue for the North Korea. [Case No. 1:24-cr-00220, U.S. District Court for the District of Columbia; filing: SENTENCING MEMORANDUM by USA as to CHRISTINA CHAPMAN]
https://storage.courtlistener.com/recap/gov.uscourts.dcd.268377/gov.uscourts.dcd.268377.33.0.pdf

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

Christina Marie Chapman laptop farm scheme (more than 300 U.S. companies) · October 2020 to October 2023
(MSMT/2025/2, report p. 89) “In 2025, Christina Marie Chapman of Arizona pleaded guilty in connection with a scheme that assisted overseas DPRK IT workers—posing as U.S. citizens and residents—in working at more than 300 U.S. companies in remote IT positions. The scheme generated more than $17 million in illicit revenue for herself and for the DPRK. According to court documents, Chapman ... conspired with overseas DPRK IT workers from October 2020 to October 2023 ... The overseas IT workers gained employment at U.S. companies, including at a top five major television network, a Silicon Valley technology company, an aerospace manufacturer, an American car manufacturer, a luxury retail store, and a U.S.-hallmark media and entertainment company”
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub