cyber.hendryadrian.com
Security News · cyberscoop.com

Nathan Austad Sentenced to 18 Months for DraftKings Credential-Stuffing Attack

· Original article ↗

Summary

Nathan Austad was sentenced to 18 months for his role in a 2022 credential-stuffing scheme that compromised about 60,000 DraftKings accounts. Prosecutors did not name DraftKings in court filings; the details match the company’s disclosure.

Key points

  • Austad pleaded guilty to conspiring to commit computer intrusion and was sentenced to 18 months in federal prison.
  • In November 2022, Austad and co-conspirators used credential stuffing to compromise roughly 60,000 DraftKings accounts, according to the article.
  • The attackers reportedly withdrew about $600,000 from around 1,600 accounts and sold access to other compromised accounts.
  • Austad was ordered to pay more than $1.3 million in restitution, forfeit $463,000, and serve three years of supervised release.
  • DraftKings initially reported less than $300,000 stolen, then disclosed that 67,995 accounts had been compromised. Prosecutors did not officially name the company in court filings.
  • Court evidence included messages indicating the defendants knew the FBI was investigating while the scheme continued.

Article Details

Event Type
Sentencing of participants in a 2022 credential stuffing attack against DraftKings.
Impact
The attack compromised approximately 60,000 accounts; DraftKings later disclosed that 67,995 accounts had been compromised. Attackers stole approximately $600,000 and sold access to other compromised accounts. Nathan Austad received an 18-month prison sentence and was ordered to pay more than $1.3 million in restitution and forfeit an additional $463,000.

MITRE ATT&CK

T1110.004 · Credential StuffingThe article identifies credential stuffing as the method used to compromise DraftKings accounts.

People

Jay ClaytonThe U.S. Attorney cited the defendants’ messages about the investigation in a statement following the sentencing.

Threat Actors

Joseph GarrisonIdentified as a defendant sentenced in the case associated with the DraftKings credential stuffing attack.Kamerin StokesIdentified as a defendant sentenced in the case associated with the DraftKings credential stuffing attack.Nathan AustadHe pleaded guilty to conspiring to commit computer intrusion for his role in the credential stuffing attack against DraftKings and was sentenced to 18 months in prison.

Vendors

DraftKingsNathan Austad, known online as “Snoopy,” was sentenced to 18 months in federal prison for his role in a 2022 credential stuffing attack that compromised tens of thousands of DraftKings accounts.

Products

DraftKingsNathan Austad, known online as “Snoopy,” was sentenced to 18 months in federal prison for his role in a 2022 credential stuffing attack that compromised tens of thousands of DraftKings accounts.

Countries

United StatesNathan Austad pleaded guilty in December to one count of conspiring to commit computer intrusion in the U.S.

Industries

fantasy sportshis role in a 2022 credential stuffing attack that compromised roughly 60,000 user accounts on the fantasy sports and betting platform DraftKings, resulting in hundreds of thousands of dollars in losses to customers.