Canadian Expatriate Faces U.S. Charges Over University Supercomputer Hack

A Canadian citizen, 35‑year‑old Ryan James Roach, has been extradited to the United States to answer criminal charges stemming from a multi‑university hacking campaign that repurposed high‑performance computing resources for cryptocurrency mining.

According to the U.S. Attorney's Office, investigators linked Roach to a series of intrusions that compromised the networks of several American universities. The attackers allegedly gained privileged access to supercomputers and other research‑grade hardware, installing unauthorized software that redirected processing power to mine digital currencies without the institutions' knowledge.

Federal prosecutors allege that the operation generated significant illicit profits by exploiting the massive computational capacity of the targeted systems. While the exact financial gains have not been disclosed, officials note that the scale of the theft could rival other high‑profile crypto‑mining schemes that have leveraged compromised cloud and corporate resources.

Roach’s extradition marks a rare instance of cross‑border cooperation in a cyber‑crime case involving sophisticated infrastructure. The Canadian authorities processed the request under the existing treaty framework, citing sufficient evidence of wrongdoing and the seriousness of the alleged offenses. He is now in federal custody awaiting arraignment.

Legal experts say the case underscores the growing challenge of securing research facilities that operate powerful, often under‑protected, computing clusters. Universities typically focus on protecting academic data, leaving them vulnerable to attackers who seek to monetize raw processing cycles rather than steal information.

The indictment carries potential penalties that include substantial fines and imprisonment, reflecting the U.S. government’s broader effort to deter cyber‑enabled financial crimes. The outcome may also prompt academic institutions to reassess their cybersecurity postures, especially regarding access controls and monitoring of high‑value compute assets.