Two Canadian nationals have been indicted in the United States over allegations that they infiltrated university computer networks, stole sensitive information, and secretly used academic computing resources to mine cryptocurrency. The alleged operation targeted educational institutions in four states over a period of more than three years.
The defendants, Ryan James Roach, 35, and Mathiew James Stubbings, 41, are accused of carrying out the intrusions between June 2016 and December 2019. According to US prosecutors, the pair focused on universities with access to powerful computing infrastructure, including supercomputers used for academic research.
Investigators allege that the defendants established virtual private servers in several countries using false identities. These servers served as infrastructure for distributing malware, collecting stolen login credentials, and managing unauthorized access to compromised networks.
Rather than limiting their activities to individual computers, the suspects allegedly used their initial access to investigate other systems within the universities. Prosecutors say they employed various tools to identify additional weaknesses and expand their control over the affected networks.
The stolen credentials reportedly helped the attackers move between compromised machines. In some cases, they allegedly used computers belonging to one victim institution to access another, making it more difficult to trace the activity to its original source.
Once they gained sufficient access, the defendants allegedly installed cryptocurrency mining software that used university computing resources without authorization. Prosecutors also accuse them of stealing information and using compromised supercomputers to conduct security vulnerability research.
The affected institutions were located in New York, Tennessee, North Carolina, and Massachusetts. Authorities have not publicly identified the universities involved or disclosed the total amount of cryptocurrency allegedly generated through the operation.
The indictment also accuses the defendants of damaging at least ten computers within a single year, resulting in financial losses of at least $5,000.
Roach was extradited from Canada to the United States on October 28, 2026, and appeared in court on November 3 ahead of a detention hearing. Stubbings is also expected to appear before a US court following his extradition from Canada.
Both men face charges involving conspiracy to obtain information from and damage protected computers, unauthorized acquisition of computer information, and intentional computer damage. If convicted, each could face up to ten years in prison and a fine of up to $250,000.