DraftKings hacker – Nathan Austad, 21, pleaded guilty in December 2025 to conspiracy to commit computer intrusion over the November 2022 DraftKings account attack. Prosecutors say hackers compromised 60,000 accounts, added payment methods to 1,600, and stole $600,000—before Austa
By the time Nathan Austad walked into court. the story had already been logged in thousands of usernames and bruised balances—but for Austad. the consequences finally had a date. The 21-year-old from Minnesota. who used the alias “Snoopy. ” was sentenced to 18 months in prison for his role in hacking DraftKings accounts in the November 2022 cyberattack.
Austad’s plea came later than the breach. In December 2025, he pleaded guilty to conspiracy to commit computer intrusion, admitting that he and co-conspirators compromised 60,000 DraftKings user accounts.
Prosecutors said the damage wasn’t limited to unauthorized access. During the attack, the hackers added payment methods under their control to 1,600 accounts and stole $600,000. For DraftKings users. that meant a familiar fear—account access turning into real financial harm—playing out on a scale prosecutors described as sweeping and targeted at payments.
DraftKings is a fantasy sports and sports betting platform where users build teams of real-world athletes and compete for cash prizes based on their performance in actual sporting events. In November 2022. the company disclosed that the hackers reached customer accounts through credential stuffing attacks that exploited weak passwords or reused login credentials.
At the time, DraftKings reported that less than $300,000 had been stolen from affected customers. A month later. it said 67. 995 customer accounts had been compromised in the attack—numbers that. in practice. meant victims were still discovering how far the intrusion reached long after the first disclosures.
The investigation also tracked how access was monetized. In May 2023, U.S. authorities charged Joseph Garrison for his role in the scheme. accusing him and his co-conspirators of selling access to hacked DraftKings accounts through online marketplaces such as the “Goat Shop.” Then. in January 2024. prosecutors charged additional suspects. including Kamerin Stokes (“TheMFNPlug”) and Nathan Austad (“Snoopy”).
According to the U.S. Department of Justice. Austad operated his own shop where he sold access to stolen accounts. using other platforms for the same purpose. The DOJ said Austad’s shop was named after the character Snoopy from the Peanuts comic strip. and that he “directly controlled and profited from his own shop.”.
The DOJ press release did not disclose how much the hackers earned from selling access. but it said Austad’s cryptocurrency accounts received approximately $465. 000 in assets. Prosecutors also pointed to direct messages Austad sent to co-conspirators in which he admitted to fraudulent activity and warned others to prepare.
Austad is not the only person tied to the case. Joseph Garrison received an 18-month imprisonment sentence in January 2024, while Kamerin Stokes received a 30-month sentence in April 2026.
For Austad, the sentence came with added consequences beyond jail time: three years of supervised release and orders to pay $463,684 in forfeiture and $1,327,061 in restitution.
DraftKings Snoopy Nathan Austad cyberattack credential stuffing hacking cryptocurrency forfeiture supervised release restitution fintech security
18 months for stealing that much?? Seems way too light, honestly.
So they hacked 60,000 accounts but only sentenced one guy? I’m confused, like where are the rest. Also how did they even add payment methods to 1,600 if the passwords were “weak”… doesn’t DraftKings have 2FA or whatever.
This “credential stuffing” thing always gets blamed but I swear it’s just them not securing shit. Like if people reused passwords, that’s on users, but DraftKings still should’ve stopped it. 600k stolen and 18 months is wild. Snoopy sounds like a cartoon villain tho.
I don’t even play DraftKings and I feel like this is why everything on the internet gets hacked eventually. The article says the plea came later than the breach, so was he already caught in 2022 or just living his life with “Snoopy” until 2025? Also they said less than $300k stolen at first, then later 600k… so were they counting wrong or did it grow over time? Either way, brutal for anyone who had money pulled.