Bybit
Hacker Ran Crypto Mining via University Network
US authorities are seeking the extradition of a Canadian national accused of operating an illegal cryptocurrency mining operation using a university computer network. The suspect, 34-year-old Ryan James Roach from Saskatoon, allegedly hacked into an American university’s systems to mine digital assets.
According to the US Attorney’s Office for the Western District of New York, Roach coordinated with another Canadian individual in 2017 to gain covert access to the institution’s computing infrastructure. Prosecutors allege that the pair used stolen credentials and malware to exploit remote servers for mining Electroneum.
The compromised university systems reportedly operated under sustained heavy loads, but without authorization or compensation. As a result, the institution experienced network instability, power disruptions, and operational issues linked to the unauthorized crypto mining activity.
Investigation and forensic analysis
The FBI traced the attack through a combination of IP address analysis, server logs, email accounts, and hosting records. Investigators claim this digital evidence directly connects Roach to the mining operation and supports the extradition request.
Authorities estimate total damages at approximately $337,000. This figure includes electricity consumption, forensic investigation costs, and expenses related to restoring affected infrastructure. The case highlights growing risks linked to illicit crypto mining using public and institutional networks.
Legal proceedings and extradition request
Roach was arrested in Canada in December 2025 but was later released on bail. The court cited the non-violent nature of the charges and the age of the alleged offenses. However, restrictions were imposed on his internet use and communications.
Roach’s legal counsel maintains his innocence. A Canadian court is scheduled to review the extradition request on April 3. If approved, the final decision will rest with Canada’s federal minister of justice.
