A recorded DistrictCon session by Nick Roy and Martyn Williams describes a misconfigured North Korean server that exposed data on overseas animators and IT workers. The server reportedly held logs, documentation, and animation files for outsourced projects, along with factory videos, shopping traces, internet-functionality details, and software used by workers operating under tight restrictions. The session combines those findings with stealer-log research to help defenders recognize similar North Korean overseas workforce activity.