Find notable cyber news and cases, enriched with sources, timelines, and signals.

November 2022 betting-website credential-stuffing campaign

Campaign
First reported
Last updated
Happening score
H score 42
2 unique sources, 2 articles

Summary

Hide ▲

The November 2022 credential-stuffing campaign against a betting platform compromised more than 60,000 accounts and drove about $600,000 in theft from affected customers. Attackers used stolen login credentials to access user accounts, add payment methods, and empty balances. The operation also fed a market for compromised-account resale, indicating an organized fraud pipeline rather than a one-off intrusion.

Related Happenings

DraftKings hit by account takeover attack

Incident
H score34 First: 25.06.2026 00:55 Last: 25.06.2026 00:55 Sources 1

How related: In November 2022, DraftKings disclosed that hackers accessed customer accounts through credential stuffing attacks that exploited weak passwords or reused login credentials.

About this happening: The DraftKings customer-account compromise exposed 60,000 accounts through credential stuffing and enabled theft from affected users. Attackers added payment methods u...

Scattered Spider SMS phishing and SIM-swap crypto theft campaign

Campaign
H score53 First: 20.04.2026 16:33 Last: 20.04.2026 16:33 Sources 1

About this happening: The Scattered Spider campaign used SMS phishing and SIM swap attacks to steal employee credentials, hijack phone numbers, and take over email and virtual currency wa...

Kamerin Stokes sentenced for DraftKings account-selling scheme

Law Enforcement
H score39 First: 17.04.2026 10:10 Last: 17.04.2026 10:10 Sources 1

How related: Joseph Garrison received an 18-month imprisonment sentence in January 2024, while Kamerin Stokes received a 30-month sentence in April 2026.

About this happening: Kamerin Stokes was sentenced to 30 months in prison for selling access to tens of thousands of hacked DraftKings accounts, closing a federal cybercrime case that a...

DraftKings hit by network compromise

Incident
H score35 First: 17.04.2026 10:10 Last: 17.04.2026 10:10 Sources 1

About this happening: DraftKings suffered a credential-stuffing account compromise that exposed nearly 68,000 accounts and enabled theft from roughly 1,600 accounts. Attackers reused cr...

DoJ seizure of $61 million Tether in pig butchering case

Law Enforcement
H score36 First: 27.02.2026 20:11 Last: 27.02.2026 20:11 Sources 1

About this happening: The U.S. Department of Justice seized $61 million in Tether tied to pig butchering cybercrime, cutting into wallets used to launder stolen cryptocurrency investmen...

Timeline

  1. 25.06.2026 00:55 1 articles · 21d ago

    Nathan Austad sentenced for DraftKings account-takeover scheme

    Legal Policy Action Update

    Nathan Austad, aka "Snoopy," was sentenced to 18 months in prison for his role in the DraftKings credential-stuffing campaign tied to the November 2022 account takeover. He had pleaded guilty to conspiracy to commit computer intrusion and admitted that he and co-conspirators compromised 60,000 DraftKings user accounts, added payment methods to 1,600 accounts, and stole $600,000.

    Show sources
  2. 15.12.2025 18:45 2 articles · 7mo ago

    November 2022 betting-website credential-stuffing campaign

    Initial Disclosure

    In November 2022, attackers began testing stolen credential pairs against the betting platform to find reused passwords. Successful logins were then used to take over accounts and monetize the access.

    Show sources