● Covered by 3 sources · 3 reportsMedium impact3 neutral
Canadian Extradited to US for Alleged Cryptomining Hacks on University Supercomputers
Key points
- Ryan James Roach was extradited to the US on October 28.
- He and Mathiew James Stubbings are accused of hacking US universities from 2016-2019.
- They allegedly stole login credentials and deployed crypto-mining malware.
- Compromised systems included supercomputers at institutions in four states.
- Both face charges with a maximum penalty of 10 years in prison.
Extradition and Charges
Ryan James Roach, a 35-year-old Canadian national from Saskatchewan, was extradited from Canada to the United States on October 28. He appeared in a Rochester, New York, federal court to face charges related to a multi-year cyber intrusion campaign. Roach and his alleged accomplice, Mathiew James Stubbings, 41, from Ontario, were indicted by a federal grand jury on charges including conspiracy to obtain information and cause damage to protected computers, obtaining information from a protected computer, and intentional computer damage.
Scope of the Cyber Campaign
The alleged intrusions occurred between June 2016 and December 2019. The targets included academic institutions in New York, Massachusetts, North Carolina, and Tennessee. The Department of Justice stated that the threat actors specifically targeted campuses maintaining supercomputers. The compromised systems were allegedly used to mine cryptocurrency, including Electroneum, and in some cases, for vulnerability research.
Method of Operation
According to the indictment, Roach and Stubbings established multi-country virtual private server (VPS) infrastructure using fraudulent identities. These servers were used to transmit malware and mining software to victim computers and to store stolen login credentials. Once inside the university networks, they allegedly stole data and login credentials before deploying crypto-mining malware.
Legal Consequences
Both Roach and Stubbings face a maximum penalty of 10 years in prison and a $250,000 fine if found guilty of the charges. While Roach has been extradited, extradition proceedings against Stubbings are still underway in Canadian courts.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
Ryan James Roach, a Canadian national, was extradited to the US to face charges for allegedly hacking educational institutions in at least four states between 2016 and 2019. He and co-defendant Mathiew James Stubbings are accused of stealing login credentials and installing cryptomining software on compromised computers. This extradition highlights increased international cooperation in prosecuting cybercriminals.
A federal grand jury indicted Ryan James Roach and Mathiew James Stubbings, two Canadian individuals, for allegedly hacking multiple US universities between 2016 and 2019. They are accused of stealing data, deploying crypto-mining malware, and using compromised systems, including supercomputers, for vulnerability research. Roach has been extradited to the US, and Stubbings awaits extradition.
A Canadian man, Ryan James Roach, has been extradited to the US to face charges for allegedly hijacking university supercomputers to mine cryptocurrency between 2016 and 2019. He and an accomplice are accused of compromising systems at academic institutions in multiple states to mine Electroneum, using fraudulent identities and malware.