Cybercrime

Third DraftKings Hacker Sentenced to 18 Months in Prison

Nathan Austad has been ordered to pay roughly $1.8 million in forfeiture and restitution, and the sentence also includes 3 years of supervised release. 

DraftKings hack

A third man charged for his role in a 2022 hacking attack on the sports and betting website DraftKings has been sentenced to prison, the Justice Department announced on Tuesday.

The DOJ has not named the targeted site, describing it as a fantasy sports and betting website, but its description of the attack matches the 2022 credential-stuffing attack targeting DraftKings. In that attack, hackers accessed more than 60,000 accounts using usernames and passwords obtained from other breaches.

Once they gained access to a DraftKings account, the cybercriminals either withdrew the available funds or sold access to the account on online marketplaces.

The third suspect charged in this case is Nathan Austad, aka Snoopy, who pleaded guilty in December 2025. He has now been sentenced to 18 months in prison and three years of supervised release. He has also been ordered to pay roughly $1.8 million in restitution and forfeiture. 

According to the DOJ, Austad and his accomplices stole approximately $600,000 from 1,600 DraftKings accounts. 

Austad also set up a website to sell compromised accounts, and investigators identified his cryptocurrency accounts, which had roughly $465,000, including funds from his criminal activities. 

Advertisement. Scroll to continue reading.

The other individuals charged for the DraftKings attack are Kamerin Stokes, sentenced to 30 months in prison in April 2026, and Joseph Garrison, sentenced to 18 months in prison in early 2024.

Authorities made public some of the messages exchanged by the three men, indicating they clearly knew they were committing a crime.

“The defendants acknowledged the federal investigation into their conduct while they were committing their crimes, even having the hubris to say the FBI could not do anything about it.  They were wrong,” said Jay Clayton, US Attorney for the Southern District of New York. “Austad’s prison sentence today demonstrates the commitment of the DOJ, the FBI, and all our federal partners to protecting our on-line markets.”

Related: Algerian Man Extradited to US for Running Cybercrime Marketplaces

Related: Russian Initial Access Broker Behind FortiBleed Campaign

Related: Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges

Related Content

Cybercrime

Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services.

Cybercrime

Karen Vardanyan has also been ordered to pay over $1.2 million in restitution to victims.

Cybercrime

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.

Cybercrime

Active since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world.

Cybercrime

Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023.

Hacker Conversations

Vinnie Liu was recruited by the NSA when he was just 17 years old. He is now the CEO of Bishop Fox.

Cybercrime

The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.

Cybercrime

Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version