Canadian Citizen Extradited to U.S. Over Multi‑State School Hacking Scheme

The U.S. Department of Justice announced this week that a Canadian national has been sent to the United States to face charges tied to a cyber‑intrusion campaign that targeted public schools in at least four states.

According to the DOJ, investigators uncovered two individuals who, beginning in 2016, installed illicit cryptomining software on the computers of several educational institutions. The malicious code co‑opted school hardware to mine cryptocurrency, siphoning processing power and electricity while remaining largely undetected for years.

Law enforcement officials say the operation was sophisticated enough to evade standard security tools used by many school districts, which often operate on limited IT budgets. By leveraging widely available cryptomining malware, the suspects were able to generate revenue without directly stealing data or demanding ransom, a tactic that complicates detection because the activity blends into normal system workloads.

The Canadian suspect was apprehended after a joint investigation involving U.S. federal agents and Canadian authorities. Following a formal extradition request, Canadian courts approved the transfer, allowing the individual to appear before a federal court in the United States. The second suspect remains at large, and authorities continue to search for additional accomplices who may have participated in the scheme.

Cybersecurity experts note that the case underscores a growing trend of threat actors exploiting public sector networks for profit. Schools, in particular, have become attractive targets because they often lack robust endpoint protection and maintain large numbers of networked devices that can be repurposed for mining operations.

Federal prosecutors have not yet disclosed the specific charges that will be filed, but they are expected to include computer fraud, unauthorized access to protected computers, and violations of the Computer Fraud and Abuse Act. The outcome of the case could influence how law‑enforcement agencies prioritize cyber‑crime investigations involving cross‑border actors and may prompt school districts to reevaluate their cybersecurity frameworks.