A 21-year-old using the alias “Snoopy” was sentenced to 18 months in prison for his role in hacking DraftKings accounts in the November 2022 cyberattack.
In December 2025, the man, Nathan Austad of Minnesota, pleaded guilty to conspiracy to commit computer intrusion, admitting that he and co-conspirators compromised 60,000 DraftKings user accounts.
During the attack, the hackers added payment methods under their control to 1,600 accounts and stole $600,000.
DraftKings is a fantasy sports and sports betting platform where users can build teams of real-world athletes and compete for cash prizes based on their performance in actual sporting events.
In November 2022, DraftKings disclosed that hackers accessed customer accounts through credential stuffing attacks that exploited weak passwords or reused login credentials.
At the time, DraftKings reported that less than $300,000 had been stolen from affected customers. A month later, the company disclosed that 67,995 customer accounts had been compromised in the attack.
In May 2023, U.S. authorities charged Joseph Garrison for his role in the scheme, accusing him and his co-conspirators of selling access to hacked DraftKings accounts through online marketplaces such as the “Goat Shop.”
In January 2024, prosecutors charged additional suspects for the cyberattack, including Kamerin Stokes (“TheMFNPlug”) and Nathan Austad (“Snoopy”).
Austad reportedly operated his own shop where he sold access to stolen accounts and also used other platforms for the same purpose.
“AUSTAD directly controlled and profited from his own shop, which was named after the character Snoopy from the Peanuts comic strip,” the U.S. Department of Justice says.
Source: U.S. DoJ
The DoJ’s press release does not disclose the amount the hackers earned from selling access to the compromised accounts, but notes that Austad’s cryptocurrency accounts received approximately $465,000 in assets.
The U.S. DoJ also mentions direct messages that Austad sent to his co-conspirators, in which he openly admitted to perpetrating fraudulent activity and warned others to prepare.
Joseph Garrison received an 18-month imprisonment sentence in January 2024, while Kamerin Stokes received a 30-month sentence in April 2026.
In addition to the prison sentence, Austad received three years of supervised release and was ordered to pay $463,684 in forfeiture and $1,327,061 in restitution.
Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.
The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.
