Find notable cyber news and cases, enriched with sources, timelines, and signals.

November 2022 betting-website credential-stuffing campaign

Campaign
First reported
Last updated
Happening score
H score 42
2 unique sources, 2 articles

Summary

Hide ▲

The November 2022 credential-stuffing campaign against a betting platform compromised more than 60,000 accounts and drove about $600,000 in theft from affected customers. Attackers used stolen login credentials to access user accounts, add payment methods, and empty balances. The operation also fed a market for compromised-account resale, indicating an organized fraud pipeline rather than a one-off intrusion.

Related Happenings

DraftKings hit by account takeover attack

Incident
H score34 First: 25.06.2026 00:55 Last: 25.06.2026 00:55 Sources 1

How related: In November 2022, DraftKings disclosed that hackers accessed customer accounts through credential stuffing attacks that exploited weak passwords or reused login credentials.

About this happening: The **DraftKings** customer-account compromise exposed **60,000 accounts** through **credential stuffing** and enabled theft from affected users. Attackers added payment methods u...

Scattered Spider SMS phishing and SIM-swap crypto theft campaign

Campaign
H score53 First: 20.04.2026 16:33 Last: 20.04.2026 16:33 Sources 1

About this happening: The **Scattered Spider** campaign used **SMS phishing** and **SIM swap** attacks to steal employee credentials, hijack phone numbers, and take over email and **virtual currency wa...

Kamerin Stokes sentenced for DraftKings account-selling scheme

Law Enforcement
H score39 First: 17.04.2026 10:10 Last: 17.04.2026 10:10 Sources 1

How related: Joseph Garrison received an 18-month imprisonment sentence in January 2024, while Kamerin Stokes received a 30-month sentence in April 2026.

About this happening: **Kamerin Stokes** was **sentenced to 30 months in prison** for selling access to **tens of thousands of hacked DraftKings accounts**, closing a federal **cybercrime** case that a...

DraftKings hit by network compromise

Incident
H score35 First: 17.04.2026 10:10 Last: 17.04.2026 10:10 Sources 1

About this happening: **DraftKings** suffered a **credential-stuffing account compromise** that exposed nearly **68,000 accounts** and enabled theft from roughly **1,600 accounts**. Attackers reused cr...

DoJ seizure of $61 million Tether in pig butchering case

Law Enforcement
H score36 First: 27.02.2026 20:11 Last: 27.02.2026 20:11 Sources 1

About this happening: The **U.S. Department of Justice** seized **$61 million in Tether** tied to **pig butchering** **cybercrime**, cutting into wallets used to launder stolen cryptocurrency investmen...

Timeline

  1. 25.06.2026 00:55 1 articles · 14d ago

    Nathan Austad sentenced for DraftKings account-takeover scheme

    Legal Policy Action Update

    Nathan Austad, aka "Snoopy," was sentenced to 18 months in prison for his role in the DraftKings credential-stuffing campaign tied to the November 2022 account takeover. He had pleaded guilty to conspiracy to commit computer intrusion and admitted that he and co-conspirators compromised 60,000 DraftKings user accounts, added payment methods to 1,600 accounts, and stole $600,000.

    Show sources
  2. 15.12.2025 18:45 2 articles · 6mo ago

    November 2022 betting-website credential-stuffing campaign

    Initial Disclosure

    In **November 2022**, attackers began testing **stolen credential pairs** against the betting platform to find reused passwords. Successful logins were then used to take over accounts and monetize the access.

    Show sources