U.S. Government Sues Georgia Tech for Cybersecurity Compliance Failures in High-Profile Lab CasE

The US government has sued Georgia Tech, alleging fraud related to cybersecurity compliance failures in a lab run by Dr. Emmanouil Antonakakis. The lawsuit claims that the lab did not follow required security protocols, specifically by refusing to install antivirus software, and submitted invoices for Department of Defense projects while non-compliant. Additionally, Georgia Tech reportedly submitted misleading self-assessments of its security controls.   Here’s a key quote from the reporting: “Georgia Tech admins asked him to comply with the requirement, but according to an internal 2019 email, Antonakakis “wasn’t receptive to such a suggestion.” In a follow-up email, Antonakakis himself said that “endpoint [antivirus] agent is a nonstarter.”

In other charges, Matthew Knoot, a 38-year-old from Nashville, was charged for aiding North Korea in hiring IT workers at U.S. and British companies using stolen identities. He allegedly operated a “laptop farm” from his home, facilitating remote work for North Koreans and laundering money for the regime. If convicted, he faces up to 20 years in prison for charges including money laundering and identity theft. This case is part of a broader investigation into North Korean IT workers posing as foreign citizens to evade sanctions and fund weapons programs.

And speaking of North Korea, CrowdStrike’s 2024 report reveals that North Korean operatives, under the group FAMOUS CHOLLIMA, have infiltrated over 100 U.S. tech firms by posing as job applicants, using stolen identities to gain remote IT positions. This insider threat enables them to exfiltrate data and funnel salaries into North Korea’s weapons programs. The report highlights a significant increase in adversaries’ use of remote monitoring tools, indicating a new era in cyber warfare that exploits the vulnerabilities of remote work environments. The FBI and DOJ have taken action against these schemes, emphasizing the global scope of North Korea’s operations.

Everyone knows that one, powerful user who refuses to do something.  The US government just said “nope, not with our dollars.”      Consquences via the power of the purse.    Include this in your list of reasons for business owners to not place themselves above the rules.    You could be sued.  

This is a growing trend of threats from North Korea, and a trend to be watching for, and training your teams about.