Canadian Nationals Indicted for Cryptocurrency Mining Scheme Targeting U.S. Universities

A federal grand jury has formally charged two Canadian citizens with a multi‑university hacking operation that allegedly siphoned computer resources to mine cryptocurrency, marking one of the most expansive cross‑border cyber‑espionage cases in recent memory.

According to the indictment, the suspects infiltrated the networks of several American higher‑education institutions, exploiting vulnerabilities in outdated software and misconfigured servers. Once inside, they installed cryptocurrency‑mining software that leveraged the schools' processing power to generate digital coins, a practice that can inflate electricity bills and degrade system performance.

Law enforcement officials say the operation was not a one‑off incident but a sustained campaign that spanned months, affecting at least five universities across different states. The indictment does not name the schools, citing ongoing investigations, but university IT departments have confirmed unusual spikes in network traffic and unexplained CPU usage during the period in question.

Federal prosecutors highlighted that the case underscores a growing trend where criminal actors target academic institutions for their high‑performance computing resources. Universities often run research clusters and large data‑analysis platforms, making them attractive targets for illicit mining operations that can run undetected for extended periods.

The two Canadians, identified only by initials in the filing, are accused of coordinating the intrusion from abroad, using a combination of phishing emails and credential‑stuffing attacks to gain initial access. Once inside, they allegedly deployed remote access tools that allowed them to maintain persistence and evade detection.

Authorities seized several cryptocurrency wallets linked to the scheme, estimating that the illicit mining generated several hundred thousand dollars in digital assets before the operation was disrupted. The indictment also mentions that the suspects used anonymizing services and cryptocurrency mixers to obscure the flow of funds.

Legal experts note that the charges carry severe penalties, including up to 20 years in prison for each count of unauthorized computer access and additional time for financial fraud. The case also raises diplomatic questions, as it involves foreign nationals and may prompt further cooperation between U.S. and Canadian law‑enforcement agencies.

University officials, meanwhile, are urging other campuses to conduct comprehensive security audits, patch vulnerable systems promptly, and educate staff and students about phishing tactics. The incident serves as a reminder that even institutions dedicated to research and learning are not immune to financially motivated cybercrime.