A Virginia man who held a top secret security clearance while working for a United States government defence contractor has pleaded guilty to helping a North Korean remote IT worker scheme win jobs at American companies.

John Allen Kurrle Jr., 62, of Gainesville, Virginia, pleaded guilty on 28 October 2026 to conspiracy to commit wire fraud in the Eastern District of Virginia. He is due to be sentenced on 28 January 2027 and faces up to 20 years in prison.

A clearance holder lent his identity

According to court documents, Kurrle was employed by a defence contractor for the US government from June to August 2025 and held an active top secret clearance with access to secret compartmented information. During that period he allowed foreign individuals to use his identity to apply for remote work, and also let them fraudulently use the identity of a third person to apply for remote positions.

The applications made using Kurrle's identity or the stolen identity produced nine job offers from US companies, including government contractors. Reporting on the court records puts the total number of applications at at least 88, with the nine offers carrying annual salaries of between $120,000 and $190,000.

In one case, his identity was used to secure a software engineering job at a company in Ventura, California, working on a generative artificial intelligence project for a component of the US military. The scheme came unstuck when the company held a video call to verify employment eligibility and noticed that the person on the call did not match Kurrle.

Laptops hosted at home

Kurrle also received laptops shipped by the victim companies to his home in Gainesville and hosted them there, allowing the people behind the scheme to access the devices remotely from outside the United States. The arrangement is known as a laptop farm, and it is a standard part of the North Korean remote worker operation: the hardware sits at a genuine US address while the work is done from abroad.

The US Attorney's Office said North Korea has dispatched thousands of IT workers to obtain remote employment with companies around the world in order to evade economic sanctions and earn money for the regime. The workers are helped by facilitators living in the United States who receive and host computers and other hardware issued by the victim companies, and who are paid a fee in return.

The plea was accepted by US District Judge Michael S. Nachmanoff. The case was announced by Theophani K. Stamos, First Assistant US Attorney for the Eastern District of Virginia, and Daniel S. Wierzbicki, special agent in charge of the FBI Washington Field Office's Counterintelligence and Cyber Division. The case number is 1:26-cr-198.

Part of a wider crackdown

Kurrle's guilty plea came on the same day the US Treasury's Office of Foreign Assets Control imposed sanctions on 10 people and one entity for taking part in similar schemes that it said funded North Korea's weapons of mass destruction and ballistic missile programmes.

Federal courts have already sentenced several other people for facilitating the same scheme, including Matthew Isaac Knoot and Erick Ntekereze Prince, and Christina Chapman, who ran a laptop farm from her home. The charge Kurrle admitted is conspiracy to commit wire fraud, and prosecutors have not alleged that he passed classified information to anyone.

For employers, the case is a reminder that a convincing CV and a genuine US address are not proof that the person doing the work is the person who was hired. Identity checks, video interviews and checks on where company hardware is actually used remain the practical defences against this kind of fraud.

[Source: US Department of Justice](https://www.justice.gov/usao-edva/pr/defense-contractor-employee-pleads-guilty-aiding-north-korean-remote-it-scheme) | [Source: USA Today](https://www.usatoday.com/story/news/nation/2026/10/29/us-defense-worker-north-korean-it/92505466007/)