# Canadian Man Extradited to U.S. Over University Supercomputer Hacking Scheme Two suspects allegedly hijacked academic computing power to mine cryptocurrency for personal financial gain. - **Source:** [Security Affairs](https://brifing.si/source/e6c4f5ec-3e1b-4152-a932-056243bd56eb) - **Published:** 2026-11-05 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/06debe17-449b-48e0-8424-200c79d01a26 ## Extradition of Primary Suspect Canadian national Ryan James Roach was extradited to the United States on October 28 to face federal charges. He stands accused alongside Mathiew James Stubbings for orchestrating a sophisticated hacking operation. The duo allegedly targeted multiple educational institutions across several states, including New York, Tennessee, North Carolina, and Massachusetts, between 2016 and 2019. ## Unauthorized Resource Exploitation The defendants allegedly bypassed network security to gain unauthorized access to university supercomputers. By deploying specialized malware, they hijacked the processing power of these high-performance machines to mine cryptocurrency for their own profit. This operation required significant technical effort, moving beyond simple phishing to exploit specific vulnerabilities within academic network infrastructures. ## Sophisticated Operational Tactics Prosecutors state the pair utilized virtual private servers registered under false names to mask their activities. They systematically stole login credentials and exfiltrated sensitive data to servers under their control. By compromising machines from one victim to hide their tracks, they successfully moved laterally through networks to expand their unauthorized access. ## Legal Charges and Penalties The indictment includes charges of conspiracy to damage protected computers and intentional unauthorized access. Each count carries a potential sentence of up to 10 years in federal prison and a $250,000 fine. Roach is currently held pending a detention hearing, while extradition proceedings for Stubbings remain ongoing within the Canadian legal system. ## Institutional Damage Assessment The Department of Justice alleges the defendants damaged at least 10 protected computers within a single year. These actions resulted in documented losses exceeding $5,000 for the affected institutions. The investigation involved collaboration between the FBI and the Justice Department’s Computer Crime and Intellectual Property Section to track the illicit activity. ## Universities as Strategic Targets Academic institutions remain high-value targets for cybercriminals due to their vast, open network architectures and powerful computing resources. Unlike standard home PCs, university supercomputers offer the immense processing capacity required for profitable cryptocurrency mining. This case underscores the persistent risk that research environments face from actors seeking to exploit institutional infrastructure. ## Security Recommendations for Institutions Security experts emphasize that credential theft should be treated as a critical incident rather than a minor nuisance. Organizations are urged to prioritize rapid patching cycles and monitor for unusual processing loads that may indicate unauthorized mining activity. Proactive network segmentation and strict access controls remain essential defenses against such persistent threats. ## Presumption of Innocence The Department of Justice maintains that the charges filed against Roach and Stubbings are formal accusations. Both defendants are presumed innocent until proven guilty in a court of law. As the legal process continues, the case serves as a stark reminder of the international cooperation required to combat sophisticated cross-border cybercrime. ## Sources covering this story - https://securityaffairs.com/202449/cyber-crime/u-s-charges-canadian-man-in-alleged-hack-of-university-supercomputers.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._