Japanese reporting and official disclosures linked a North Korean IT worker to subcontracted maintenance work on Hyogo Prefecture's disaster information app, Hyogo Bosai Net. The worker allegedly used another person's identity on freelance matching platforms, received app-development payments through intermediaries, and withdrew funds in China via a debit-card remittance chain. Hyogo Prefecture and Radio Kansai later said no data leakage, unauthorized data transfer, malicious app, or malicious program had been confirmed in the app. The case illustrates the risk highlighted by U.S. government guidance: DPRK IT workers can mask identity and location to obtain freelance software work, raising sanctions-evasion, supply-chain, and access-control concerns.