In a landmark federal court case, Christina Marie Chapman, a 50-year-old resident of Arizona, has been sentenced to 102 months in prison after pleading guilty to helping North Korean IT operatives penetrate the remote networks of more than 300 American businesses. Prosecutors have described the sophisticated fraud operation as one of the largest ever prosecuted involving North Korean cyber schemes targeting the U.S. private sector.
Sophisticated Scheme with Global Reach
Between 2020 and 2023, Chapman orchestrated an elaborate operation from her home, known as a “laptop farm.” She received and managed laptops distributed by U.S. companies for their remote employees. Chapman then installed remote-access software and altered identifying documentation, enabling North Korean operatives—posing as American workers—to access these devices. These operatives, located primarily in China near the North Korean border, used the laptops to secure positions at 309 U.S. firms, including major technology companies, a national television network, aerospace contractors, luxury retailers, and leading automotive corporations.
Investigators found that Chapman and her associates stole the identities of at least 68 Americans to obtain and maintain these jobs. In addition to facilitating access to corporate systems, Chapman arranged for payroll checks to be sent to her address, laundering proceeds through her own accounts before transferring funds overseas.
National Security Risks and Financial Motivations
Authorities estimate that the scheme generated more than $17 million in fraudulent revenue. Portions of these proceeds were allegedly routed to the North Korean government, providing critical funding for its cyber operations and, potentially, its nuclear weapons program. The U.S. Department of Justice warns that such schemes underscore Pyongyang’s ability to harness technical talent to bypass international sanctions and embed clandestine operatives within sensitive American industries.
Legal and Financial Consequences
Chapman pleaded guilty in February 2025 to conspiracy to commit wire fraud, aggravated identity theft, and conspiracy to launder monetary instruments. In addition to her prison sentence, she has been ordered to forfeit approximately $284,556 attributable to unlawful payments and to pay $176,850 in restitution to affected businesses.
