A Minnesota man known online as “Snoopy” has been sentenced to 18 months in prison for his involvement in a hacking operation that targeted user accounts on DraftKings, a popular fantasy sports and betting platform. U.S. authorities announced the sentence after he pleaded guilty to conspiracy to commit computer intrusion. The case is part of a wider investigation into a cybercrime group that exploited stolen credentials.

draftkings-account-takeover-cyberattack-target

The hacker, identified as Nathan Austad, admitted to participating in a scheme that used usernames and passwords stolen from previous data breaches. These credentials were then used in a credential-stuffing attack against DraftKings accounts. By reusing leaked login details, the attackers were able to gain unauthorized access to thousands of user accounts.

According to investigators, the group successfully compromised more than 60,000 DraftKings accounts. Once access was obtained, the attackers either sold the accounts online or used them to steal money from victims. The operation caused significant financial losses and affected a large number of platform users.

draftkings-credential-stuffing-attack-stolen-passwords

Authorities said that approximately 1,600 compromised accounts were directly used to steal funds. In total, around $600,000 was taken from affected users during the scheme. The attackers reportedly added payment methods under their control and transferred money from victim accounts for personal gain.

Court documents show that Austad was one of several individuals linked to the hacking operation. Federal prosecutors stated that the group obtained stolen credentials from criminal marketplaces and dark web sources. They then automated login attempts to identify accounts where users had reused passwords from other services.

draftkings-hacker-snoopy-credential-stuffing-scheme

In addition to the prison sentence, Austad was ordered to serve three years of supervised release after completing his jail term. He was also directed to pay roughly $1.8 million in restitution and forfeiture. Officials said these penalties reflect the seriousness of the cybercrime and the losses suffered by victims.

Federal authorities emphasized that credential-stuffing attacks remain a major threat because many people continue to reuse passwords across multiple websites. When one service suffers a data breach, attackers can use the stolen credentials to target accounts on other platforms. This practice often allows cybercriminals to gain access without breaking passwords directly.

draftkings-account-security-password-reuse-risk

The sentencing of Nathan Austad marks another development in the long-running DraftKings hacking case. Officials said the prosecution demonstrates the consequences faced by individuals who participate in account takeover schemes and online fraud. The case also serves as a reminder of the importance of strong, unique passwords and multi-factor authentication for protecting online accounts.

Stay alert, and keep your security measures updated!

Source: Follow cybersecurity88 on X and LinkedIn for the latest cybersecurity news