Ryan James Roach

Introduction

Ryan James Roach, a 35-year-old man from Saskatchewan, Canada, was extradited to the United States on October 28, 2026 to face a federal indictment charging him with a yearslong hacking scheme that breached American universities, stole login credentials, and secretly commandeered victim computers to mine cryptocurrency for his own profit. A federal grand jury in the Western District of New York charged Roach and co-defendant Mathiew James Stubbings, 41, of Ontario, with computer-intrusion counts carrying up to 10 years in prison; Roach was arraigned in Rochester before Magistrate Judge Mark W. Pedersen and held pending a detention hearing. The charges are accusations, and Roach is presumed innocent until proven guilty.

Background Information

The indictment alleges that between June 2016 and December 2019, Roach and Stubbings conspired to hack into computers, steal login credentials, and secretly mine cryptocurrency for financial gain — a scheme whose victims included educational institutions in New York, Tennessee, North Carolina, and Massachusetts, with some of the damaged computers located at an institution of higher learning in the Western District of New York. The pair allegedly used virtual private servers in multiple countries, registered under false names, which transmitted malware and mining software to victim computers and stored the stolen credentials. Prosecutors allege the defendants damaged 10 or more protected computers during a one-year period, causing a loss of at least $5,000 — the thresholds that federal computer-fraud statutes require.

The Controversy or Incident That Led to Their Cancellation

Charged, not convicted. Roach faces an indictment returned in the Western District of New York; the allegations are unproven and he is presumed innocent until and unless proven guilty.

The scheme, as laid out in the indictment, targeted institutions that had something most hackers cannot reach: supercomputers. Roach and Stubbings allegedly researched security vulnerabilities in victim computer networks, used a variety of methods to gain access, and concealed their identities by routing their activity through a server and compromised computers taken from another victim. Once inside a network, they allegedly used sophisticated techniques and tools to conduct reconnaissance and expand their access, exfiltrating stolen data to servers they controlled — and, the allegation at the scheme’s core, forcing victim computers to spend their processing power mining cryptocurrency for the defendants’ financial benefit. University computing grids are priced and powered for research; the indictment describes them converted, without the institutions’ knowledge, into someone else’s cryptocurrency mine.

Roach’s route back to the United States ran through extradition: the Justice Department’s Office of International Affairs provided assistance in securing his arrest and his October 28, 2026 extradition from Canada, after which he was arraigned before U.S. Magistrate Judge Mark W. Pedersen and held pending a detention hearing scheduled for November 3, 2026, at 1:00 p.m. The case against Stubbings remains in progress abroad — extradition proceedings continue in Canada for the Ontario co-defendant. The indictment is the result of an investigation by the Federal Bureau of Investigation under the direction of Special Agent-in-Charge Allen D. Davis, II, and it is being prosecuted by Assistant U.S. Attorney Meghan K. McGuire. The announcing office carried the standard charge-stage caution: the fact that a defendant has been charged with a crime is merely an accusation, and the defendant is presumed innocent until and unless proven guilty.

Public Reaction and Consequences

The extradition of a Canadian national to answer American university-hacking charges is the visible edge of the international coordination such cases require — the FBI investigation, the Office of International Affairs’ work with Canadian authorities, and the false-name server infrastructure across multiple countries all had to be unraveled to identify the two defendants. The counts Roach faces — conspiracy to obtain information from a protected computer and to cause damage to a protected computer, obtaining information from a protected computer, and intentional damage to a protected computer — each carry a maximum penalty of 10 years in prison and a $250,000 fine. The case lands in the small category of prosecutions charging cryptojacking, the covert use of victim hardware for cryptocurrency mining, as computer fraud.

Current Status

Roach, 35, is in federal custody in the Western District of New York following his October 28, 2026 extradition and arraignment, held pending the detention hearing that was scheduled for November 3, 2026. He faces three categories of computer-intrusion counts built on conduct the indictment places between June 2016 and December 2019 — conduct that predates the period this site covers, but whose prosecution and extradition arrived in 2026, which is the development documented here. Co-defendant Stubbings fights extradition in Canada, and no trial date has been set. Both men remain presumed innocent under the law of the charging jurisdiction.

Impact on Their Career/Life

Roach’s extradition marks the moment a seven-year-old case file crossed a border: the alleged scheme ended in December 2019, but the indictment, the arrest in Saskatchewan, and the transfer to a Rochester jail cell all arrived in 2026, and the maximum ten-year exposure per count now attaches to a man in his mid-thirties. For the universities in four states whose networks he is alleged to have penetrated, the case documents a threat model — credential theft, lateral movement, and silently conscripted supercomputer time — that campus security teams have since built defenses against. The detention-hearing outcome and any trial remain ahead; the criminal charge alone has already converted a Canadian resident into a federal defendant held an ocean from home.

Sources

• U.S. Attorney’s Office, Western District of New York, “Canadian man extradited to the U.S. for his role in computer hacking scheme targeting universities,” November 4, 2026. source