North Korea designations; Democratic Republic of the Congo-related designations

What's on the official record

28 October — SDN List additions. OFAC added ten individuals and three entities to the SDN List. The page cites no Executive Order and carries no general licenses or FAQs.

Ten individuals were added under North Korea Sanctions Regulations tags [DPRK2] or [DPRK3], each with "Secondary sanctions risk: North Korea Sanctions Regulations, sections 510.201 and 510.210" and "Transactions Prohibited For Persons Owned or Controlled By U.S. Financial Institutions: North Korea Sanctions Regulations section 510.214." The individuals are BOYKOV, Ilya Aleksandrovich [DPRK2]; HAN, Yu Song [DPRK3]; HYON, Se Il [DPRK3]; KIM, Hyo Dong [DPRK2]; KIM, Ki Hyok [DPRK2]; KIM, Kyong Ju [DPRK3]; KIM, Sung Gwan [DPRK3]; OBERTAS, Vitold Viktorovich [DPRK2]; RI, Thae Chol [DPRK3]; and SO, Hyong Jin [DPRK3]. Six are linked to FIRST FINANCIAL AND TECHNICAL DEVELOPMENT CENTER, two to CHINYONG INFORMATION TECHNOLOGY COOPERATION COMPANY, and one to LIMITED LIABILITY COMPANY ALIS. The page lists ETH and TRX digital-currency addresses verbatim for several of the individuals.

Three entities were added: FIRST FINANCIAL AND TECHNICAL DEVELOPMENT CENTER (Korea, North; Vladivostok, Russia) [DPRK3]; MINISTRY OF DEFENCE OF THE REPUBLIC OF RWANDA (Kigali, Rwanda) [DRCONGO]; and ZIGAMA CREDIT AND SAVINGS SOCIETY (Kigali, Rwanda) [DRCONGO]. The page links two Treasury press releases: "Treasury Sanctions Facilitators of DPRK IT Worker Fraud Targeting U.S. Businesses" (sb0669) and "Treasury Sanctions Rwandan Ministry of Defence and Financial Institution Supporting M23" (sb0668). "Unrelated Administrative List Changes: None."

Assessment

For a sanctions or trade-finance committee, the record lets this reader check whether any counterparty, customer, or payment path touches the ten named individuals, the three named entities, or the digital-currency addresses the page lists verbatim, and decide whether to enhance diligence or hold a transaction. The DPRK entries carry secondary-sanctions risk language under North Korea Sanctions Regulations sections 510.201 and 510.210, which is the page's stated mechanism.

For an owner or operating executive, the record lets this reader check whether any vendor, contractor, or IT-services relationship routes through the named DPRK-linked entities or individuals, and decide whether to exit or fix the relationship before a buyer or lender checks. The page names no company other than the listed entities; exposure is a screening question the reader must resolve against its own records.

For a credit committee (a lender), the record lets this reader check whether any borrower, guarantor, or correspondent relationship touches ZIGAMA CREDIT AND SAVINGS SOCIETY or the MINISTRY OF DEFENCE OF THE REPUBLIC OF RWANDA, both tagged [DRCONGO], and decide whether to monitor, covenant, or waive. The page cites no Executive Order for the DRC entries.

What would change this call

The call would change if a later OFAC page or the linked press releases (sb0668, sb0669) state a sanctions program or Executive Order basis the action-day page omits, or if the SDN entries for the ten individuals and three entities reveal additional identifiers, addresses, or program tags not shown on this page.

What to check next

Confidence

This note is drawn from the single OFAC recent-actions page for 28 October 2026 (https://ofac.treasury.gov/recent-actions/20261028). No other source was consulted. The page names no attacker, cause, or loss beyond the designations themselves, so none is stated here.

Sources

[1] OFAC Recent Actions — 28 October 2026 — https://ofac.treasury.gov/recent-actions/20261028