The Southern District of New York charged a man on six counts in relation to an alleged hacking of DraftKings players accounts.
The complaint claims that Joseph Garrison illegally accessed DraftKings account in November 2022 through a “credential-stuffing attack” which involves entering stolen credentials, such as usernames or passwords, into login pages of other services.
Garrison is accused of gaining access to 60,000 DraftKings accounts.
Garrison then sold access to the compromised accounts through several illegal websites. Buyers then withdrew approximately $600,000 after 1,600 compromised accounts.
Garrison’s home was searched by the police after they had located him. They found credential stuffing software, as well as messages between Garrison and his co-conspirators.
Garrison was accused of conspiracy to commit computer intrusion and two counts each of computer fraud. He also faces charges for conspiracy to commit wirefraud, wire fraud, and aggravated identity theft.
Garrison has been arrested on a warrant.
DraftKings released a statement in November 2022 confirming that about $300,000 of customer funds were affected due to a massive hacking.
