DraftKings Hacker 'Snoopy' Sentenced for $600K Credential Stuffing Attack

Nathan Austad, a 21-year-old from Minnesota using the alias 'Snoopy', was sentenced to 18 months in prison for his role in a November 2022 cyberattack on DraftKings. The attack involved credential stuffing, compromising approximately 60,000 user accounts and stealing around $600,000. Austad and his co-conspirators added their own payment methods to 1,600 accounts and withdrew existing funds. He pleaded guilty to conspiracy to commit computer intrusion in December 2025. In addition to his prison sentence, he was ordered to pay over $1.3 million in restitution and forfeiture. Austad operated a shop for selling access to the hacked accounts, profiting significantly from the scheme. His sentencing follows similar sentences for other co-conspirators, including Joseph Garrison and Kamerin Stokes. The attack highlighted vulnerabilities in user account security, particularly regarding weak passwords and credential reuse.

Key Points: • Nathan Austad sentenced to 18 months for hacking 60,000 DraftKings accounts. • Attack method involved credential stuffing, leading to $600,000 in theft. • Austad operated a shop selling access to stolen accounts and faces significant restitution.