A young man in his 20s has been sentenced in relation to a multi-layered attack against sports betting operator DraftKings. The 23-year-old man from Memphis, Tennessee, will spend 30 months in prison along with three years of supervised release.
Kamerin Stokes was involved in the identification of login information for DraftKings platforms, which he then proceeded to sell online to other parties, who used the information to steal money from more than 60,000 accounts, resulting in $600,000 in losses.
Stokes has been sentenced to pay a $1.3m restitution to the company, citing a hit it took to its stock at the time. He will also have to pay $125,000 in forfeiture. With Stokes’ help, hackers were able to breach the accounts in question and make away with more than $600,000 in existing funds.
Incredulously, Stokes still kept selling credentials after he pleaded guilty, citing financial hardship and the need to keep paying his attorneys. His "shop" was called "fraud is fun."
Stokes essentially used stolen data to try to identify what individuals may have recycled their credentials across platforms, DraftKings included. Once these have been identified, Stokes proceeded to sell these credentials.
People who bought them logged into the accounts and added an additional payment method, which allowed them to withdraw the funds afterwards.
Two other people have been named in the same case: Joseph Garrison, who pleaded guilty and was sentenced to 18 months in February 2024, and Nathan Austad, who pleaded guilty in December 2025, but awaits sentencing.
Image credit: Unsplash.com
