A US federal grand jury has indicted Canadians Ryan James Roach, 35, and Mathiew James Stubbings, 41, on charges of conspiracy to obtain information from and damage a protected computer, obtaining information from a protected computer and intentional damage to a protected computer, BleepingComputer reported on 4 November 2026.

According to court documents and the Department of Justice, as reported by BleepingComputer, between June 2016 and December 2019 the two used virtual private servers in several countries, registered under fake names, to deliver malware and mining software to computers at educational institutions in New York, Tennessee, North Carolina and Massachusetts and to store stolen login credentials, and targeted institutions that had supercomputers. Prosecutors say the pair damaged at least 10 computers over one year, causing losses of at least $5,000; each faces a maximum of 10 years in prison and a $250,000 fine if found guilty.

Roach was extradited from Canada on 28 October and was arraigned before a detention hearing on 3 November; Stubbings will be arraigned after his extradition from Canada. (source: BleepingComputer)

The Record says Roach appeared in a federal court in Rochester, New York, on Tuesday and that the Justice Department is still trying to secure Stubbings' extradition in Canadian court. (source: The Record) The charges are accusations; the defendants are presumed innocent unless proven guilty.