TWO CANADIAN NATIONALS INDICTED IN UNIVERSITY CYBERATTACK SCHEME INVOLVING CREDENTIAL THEFT AND UNAUTHORIZED CRYPTOCURRENCY MINING

ROCHESTER, NEW YORK — Two Canadian nationals have been indicted on federal computer hacking charges involving an alleged cybercrime operation that targeted educational institutions across four U.S. states between June 2016 and December 2019. Ryan James Roach, 35, of Saskatchewan, Canada, and Mathiew James Stubbings, 41, of Ontario, Canada, are accused of infiltrating protected computer networks, stealing login credentials, deploying malicious software, and exploiting university computing resources to generate cryptocurrency for their financial benefit.

U.S. Attorney Michael DiGiacomo for the Western District of New York announced the charges on November 3, 2026, following Roach’s extradition from Canada to the United States on October 28. The defendants are charged with conspiracy to obtain information from protected computers and cause damage to protected computers, obtaining information from protected computers, and intentionally damaging protected computers. Stubbings remains in Canada, where extradition proceedings are ongoing.

According to the federal indictment, Roach and Stubbings allegedly operated a coordinated hacking scheme targeting educational institutions in New York, Tennessee, North Carolina, and Massachusetts. Their activities involved identifying vulnerabilities in university computer networks, obtaining unauthorized access to protected systems, and installing malware capable of maintaining control over compromised machines. Prosecutors allege that the defendants specifically sought institutions possessing supercomputers, allowing them to exploit substantial processing capabilities for unauthorized cryptocurrency mining.

The alleged operation relied on virtual private servers located in multiple countries and registered under fictitious identities. These remote systems served several purposes, including distributing malicious software to compromised computers, storing stolen authentication credentials, and supporting the unauthorized mining operation. The use of overseas infrastructure allegedly helped the defendants conceal their activities and complicate efforts to identify the individuals controlling the attacks.

Federal prosecutors allege that the defendants researched security vulnerabilities in targeted university networks and used multiple methods to obtain unauthorized access. Once inside, they deployed malware, collected legitimate user credentials, and transferred stolen information to servers under their control. The compromised credentials provided opportunities to access additional resources, while malicious software allowed the attackers to direct computing activity without authorization from the institutions responsible for those systems.

The indictment describes further activity involving internal network reconnaissance and the expansion of unauthorized access. After compromising an initial computer or server, Roach and Stubbings allegedly examined the surrounding network to identify additional systems and opportunities for exploitation. Prosecutors also accuse them of using infrastructure and computers compromised during attacks against other victims to conceal the origins of their intrusions.

A central objective of the alleged conspiracy was cryptojacking, the unauthorized use of another party’s computing resources to mine cryptocurrency. By deploying mining software on university computers, the defendants allegedly redirected processing power toward generating digital assets for themselves. This activity allowed them to benefit financially from computing equipment and operational resources belonging to the targeted educational institutions.

The indictment alleges that Roach and Stubbings damaged at least 10 protected computers within a one-year period, causing losses of at least $5,000. Some of the affected computers were located at an institution of higher education within the Western District of New York. The Justice Department did not identify the affected universities by name or disclose the total cryptocurrency proceeds allegedly generated through the scheme.

The alleged intrusions demonstrate how university research networks can become targets for criminals seeking access to specialized computing infrastructure. Supercomputers and other high-performance systems support demanding academic and scientific workloads, making their processing capabilities valuable to attackers attempting to conduct unauthorized cryptocurrency mining. Compromised credentials and malicious remote infrastructure can also enable continued access to network resources beyond the computers initially targeted.

Following his extradition, Roach appeared before U.S. Magistrate Judge Mark W. Pedersen in Rochester. He was held pending a detention hearing scheduled for November 3, 2026, at 1:00 p.m. The Justice Department’s announcement did not provide the outcome of that hearing. Canadian authorities continue to address the legal proceedings necessary for Stubbings’ possible extradition to the United States.

The federal charges carry a maximum penalty of 10 years in prison and a $250,000 fine, according to the U.S. Attorney’s Office. Any sentence imposed following a conviction would be determined by the federal court after considering the applicable criminal statutes, sentencing guidelines, and circumstances of the offenses.

The FBI conducted the investigation under the direction of Special Agent in Charge Allen D. Davis II, with involvement from the Justice Department’s Computer Crime and Intellectual Property Section. Assistant U.S. Attorney Meghan K. McGuire is prosecuting the case. The Justice Department’s Office of International Affairs assisted in securing Roach’s arrest and coordinating his extradition from Canada.

The prosecution concerns an alleged international hacking operation that combined unauthorized network access, credential theft, malware deployment, and cryptocurrency mining against educational institutions. The investigation also demonstrates the role of cross-border law enforcement cooperation in pursuing defendants accused of conducting computer intrusions against U.S. organizations from outside the country.

Roach and Stubbings have been indicted but have not been convicted. The charges are allegations that federal prosecutors must prove beyond a reasonable doubt, and both defendants are presumed innocent unless and until proven guilty in court.

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE