A 23-year-old Memphis man, Kamerin Stokes, was sentenced to 30 months in prison for his role in a 2022 credential-stuffing attack that compromised about 60,000 DraftKings accounts. Stokes, who used the alias ‘TheMFNPlug,’ sold bulk access to compromised accounts, was ordered to forfeit $125,000 and pay $1.3 million in restitution, and two co-defendants have also pleaded guilty. #KamerinStokes #DraftKings
Keypoints
- Kamerin Stokes received 30 months in prison, three years of supervised release, $125,000 forfeiture, and $1.3 million restitution.
- The 2022 credential-stuffing attack used reused credentials to access roughly 60,000 accounts on a fantasy sports betting site.
- Stokes operated as “TheMFNPlug” and sold bulk access to compromised DraftKings accounts through an online marketplace.
- Two collaborators, Joseph Garrison (sentenced to 18 months) and Nathan Austad (pleaded guilty), were involved in the scheme.
- DraftKings continued to face credential-stuffing attempts, prompting a company warning in October 2025.
Read More: https://www.securityweek.com/another-draftkings-hacker-sentenced-to-prison/