Third Defendant in DraftKings Credential-Stuffing Case Sentenced to 18 Months
Summary
Nathan Austad was sentenced to 18 months in prison for his role in a 2022 credential-stuffing attack matching the DOJ’s description of the DraftKings case. The DOJ says Austad and accomplices stole about $600,000 from 1,600 accounts.
Key points
- Nathan Austad, also known as Snoopy, pleaded guilty in December 2025 and received 18 months in prison and three years of supervised release.
- Austad was ordered to pay roughly $1.8 million in restitution and forfeiture.
- The DOJ says Austad and accomplices stole approximately $600,000 from 1,600 DraftKings accounts.
- The article says the 2022 attack used credentials obtained from other breaches to access more than 60,000 accounts; DOJ did not name the targeted site, but its description matches DraftKings.
- Austad also set up a website to sell compromised accounts, and investigators identified cryptocurrency accounts holding roughly $465,000, including proceeds from his criminal activity.
- Two other defendants, Kamerin Stokes and Joseph Garrison, were previously sentenced to 30 months and 18 months in prison, respectively.
Article Details
- Event Type
- Sentencing of individuals involved in a 2022 credential-stuffing attack targeting DraftKings accounts.
- Impact
- The attackers accessed more than 60,000 accounts using credentials obtained from other breaches. According to the DOJ, Nathan Austad and accomplices stole approximately $600,000 from 1,600 accounts. Austad was sentenced to 18 months in prison and three years of supervised release and ordered to pay roughly $1.8 million in restitution and forfeiture. Kamerin Stokes and Joseph Garrison were also sentenced.
MITRE ATT&CK
People
Threat Actors
Joseph GarrisonIdentified as one of the individuals charged in the DraftKings attack and sentenced to 18 months in prison.Kamerin StokesIdentified as one of the individuals charged in the DraftKings attack and sentenced to 30 months in prison.Nathan AustadPleaded guilty to his role in the DraftKings account attack and was sentenced; the article identifies Snoopy as his alias. The DOJ said he and accomplices stole approximately $600,000 from 1,600 accounts, and Austad set up a website to sell compromised accounts.