Skip to content
Canadian Men Charged in University Hacking Scheme to Mine Cryptocurrency

Canadian Men Charged in University Hacking Scheme to Mine Cryptocurrency

First seen 4 Nov 2026, 12:17 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 4, 2026 at 12:18 UTC
  • •Two Canadian men face federal charges for hacking U.S. universities.
  • •The hacking scheme involved stealing credentials and mining cryptocurrency.
  • •Roach was extradited to the U.S. on October 28, 2026; Stubbings is pending extradition.

Ryan James Roach and Mathiew James Stubbings, both from Canada, have been indicted for their involvement in a hacking scheme targeting U.S. universities from June 2016 to December 2019. They allegedly stole login credentials and used malware to mine cryptocurrency, causing damages exceeding $5,000. The pair utilized virtual private servers registered under false identities to conceal their activities and targeted institutions with supercomputers. Roach was extradited to the U.S. on October 28, 2026, while Stubbings remains in extradition proceedings in Canada. The indictment includes charges of conspiracy and intentional damage to protected computers. The investigation was led by the FBI, with the U.S. Attorney's Office overseeing the prosecution.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2026-10-28
Ryan Roach extradited to the U.S.
Roach was extradited from Canada to face charges related to the hacking scheme targeting U.S. universities.
Justice
2026-11-03
Roach arraigned in U.S. court
Ryan Roach was arraigned before U.S. Magistrate Judge Mark W. Pedersen and held pending a detention hearing.
13Wham

More articles in this cluster (5)

Following this threat?

Track Education in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3

Common questions

What charges are Roach and Stubbings facing?
They are charged with conspiracy to obtain information from a protected computer and intentional damage to a protected computer.
How did they conduct the hacking?
They used virtual private servers registered under false names to deploy malware and mine cryptocurrency.
What is the current status of the case?
Roach has been extradited and arraigned, while Stubbings is still in extradition proceedings in Canada.