Federal prosecutors in New York announced criminal charges against an 18-year-old Wisconsin man for a scheme to hack user accounts of the sports betting site DraftKings. Joseph Garrison is accused of working with others to steal about $600,000 from approximately 1,600 victim accounts during the November 2022 attack.

From CNBC:

DraftKings is not named in the criminal complaint against Garrison. But a person close to the company said it was a target of the so-called credential stuffing attack. DraftKings later confirmed it.

In a statement to CNBC, DraftKings said: “The safety and security of our customers’ personal and payment information is of paramount importance to DraftKings. We worked with law enforcement in catching the alleged bad actor(s), and we want to thank the Department of Justice, including the FBI and U.S. Attorney, Southern District of New York, for their prompt and effective action.”

The company said it restored funds for the “limited number of users” who were impacted by the breach.

Law enforcement authorities searched Garrison’s home in Wisconsin on Feb. 23, and recovered his computer and cellphone, according to the complaint.

On those devices, investigators found credential stuffing programs, instruction photos on how to use stolen user credentials to steal money from victim accounts, and messages between Garrison and co-conspirators, the complaint said.
Read more here: https://www.cnbc.com/2023/05/18/teen...-feds-say.html