SecurityWeekIonut Arghire
Third DraftKings Hacker Pleads Guilty
Nathan Austad, 21, of Farmington, Minnesota, also known as “Snoopy”, admitted in court to launching a credential stuffing attack against a fantasy sports and betting website, according to the DoJ announced by SecurityWeek. He pleaded guilty to computer intrusion conspiracy and faces up to five years in prison.
Court documents show that Austad and his co-conspirators compromised over 60,000 user accounts, added a new payment method to those accounts, and stole roughly $600,000 from about 1,600 victims, with access sold through various online shops; Austad controlled one such shop and cryptocurrency accounts that received roughly $465,000 in virtual assets.
The impacted site was not named in the article, but it is likely DraftKings, which in November 2022 announced that approximately 68,000 user accounts were compromised in a credential stuffing attack. Two other individuals, Joseph Garrison and Kamerin Stokes, were arrested and indicted; Garrison pled guilty in November 2023 and was sentenced to 18 months in prison in early 2024, while Stokes pled guilty in April 2024. In October 2025, DraftKings warned of a new wave of credential stuffing attacks targeting its users.