Man gets 30 months for selling thousands of hacked DraftKings accounts

A credential-stuffing campaign in November 2022 compromised nearly 68,000 DraftKings accounts using credentials stolen in prior breaches; attackers sold access to these hijacked accounts (also including FanDuel and Chick-fil-A) and stole approximately $635,000 from about 1,600 accounts. Kamerin Stokes (aka TheMFNPlug) was sentenced to 30 months in prison for reselling access to thousands of compromised accounts, ordered to pay restitution and forfeiture, and was remanded again after reopening his shop while awaiting trial.