Mouse jigglers at work: what dated public cases establish

The record type controls what can be said. An inspector-general report is a primary oversight finding. A news report describing regulatory disclosures remains attributed reporting when the underlying individual records have not been inspected. An indictment records prosecutors' allegations, and a company policy states expectations rather than documenting an incident.

This table keeps event dates separate from publication dates. It also states what is missing, so that readers do not confuse a historical finding with a 2026 count, an allegation with a judicial conclusion, or a detected installation with a dismissal.

EPA OIG's report summary identifies unauthorized jiggler software and says removal timing differed between regional offices. It also reports that some IT specialists believed they were exempt from policy. Those findings concern authorization and implementation of security controls.

The summary supports a concrete instance of software discovery. It does not establish that every affected person simulated a full workday, failed to complete work, or received the same consequence. We do not infer those individual outcomes.

Reuters described employees in the wealth and investment management unit and attributed the FINRA disclosure details to Bloomberg. A Wells Fargo spokesperson separately told Reuters that the company expected high standards and did not tolerate unethical behavior.

The article said it was unclear whether the alleged activity occurred from home. It did not establish a jiggler model or detection technique. We therefore retain simulated keyboard activity as the allegation and do not convert the story into a tested hardware-detection claim.

Paragraphs 13–16 of the federal indictment describe remote access to an executive assistant's work environment through a personal laptop. The filing alleges that a mouse jiggler helped keep the session from locking, and that confidential information was later accessed without the assistant's knowledge or permission.

That record adds a security context distinct from apparent availability. We describe what the historical indictment alleged, without naming the assistant, treating the assistant as a defendant, or reporting a present case disposition. A claim about preventing a lock is not evidence that an employer detected a false green dot.

Wells Fargo's accessible Code of Conduct is labeled February 2025. It tells employees to protect company laptops and other assets, safeguard credentials, and prevent unauthorized people from using company equipment. Its scope includes office, remote, and travel contexts.

That is a primary statement of expectations as published in 2025. It is not the exact disciplinary file or the policy version applied to the May 2024 dismissals. We do not backdate it or claim its general asset-security provisions specifically name mouse jigglers. Readers need the applicable policy and version to assess a particular workplace rule.

In July 2024, Scottish law firm Wright, Johnston & Mackenzie discussed the Wells Fargo story in its own commentary. It emphasized transparency and context in monitoring and suggested examining productivity and outputs. That is attributed professional commentary, not an additional confirmed dismissal or a court judgment.

The article expressly locates its understanding in July 2024. We do not use it as a statement of every jurisdiction's current law, as a forecast of an individual's employment outcome, or as a substitute for the primary incident records. This study provides historical evidence, not legal advice.

Check whether the source describes installation, a running application, suspected input patterns, an unlocked session, or admitted misconduct. Those are different observations. Then look for an employer statement, published oversight report, or court document, and separate that source from later commentary.

Keep the denominator attached to any number. A total in two agency regions is not a national workforce estimate; a group of reported dismissals is not a rate; and several articles about one incident are not several independent cases. Missing location, device, and outcome details should stay missing rather than be reconstructed from a headline.

Cite this page as Idle Pilot's selective public-record review checked October 28, 2026. For the underlying facts, cite the dated record itself. We did not interview employers, perform experiments, inspect personnel files, or independently verify the people behind reported allegations.