The US gambling industry just got slapped with a bitter reminder that security isn’t just about platforms or tech — it’s also about how users act.
The US Attorney’s Office for the Southern District of New York has confirmed that 23 year old Kamerin Stokes, aka TheMFNPlug, copped 30 months in federal prison on top of 3 years supervised release for conspiring to hack DraftKings. He also has to cough up a pretty penny: a total of $1.3 million in restitution to DraftKings and a further $125,965 in forfeitures.
The Real Story Behind The Hack
Stokes played a big role in hacking more than 60,000 DraftKings accounts, which meant losses exceeding $600,000. But the fallout went way beyond that: DraftKings’ stock dropped by a whopping 5% on the NASDAQ, mainly due to users losing faith.
Important detail: this wasn’t a classic “hack” exploiting a platform vulnerability.
Instead, the entire operation was based on credential stuffing — using leaked usernames and passwords from other services and trying them on DraftKings accounts. In simple terms, users who reused passwords across platforms became the entry point.
How This Whole Scheme Went Down
Stokes didn’t actually withdraw the cash himself. What he did was find matching login credentials and then sell access details on the dark web. Then other fraudsters would take over from there:
- They’d add new payment methods to the hacked accounts
- Verify with small deposits (around $5 each)
- Then quickly take the available cash
One of those involved was Joseph Garrison, a teenager from Wisconsin, who openly described fraud as “fun.” He has already been sentenced to 18 months in prison, while another participant is still awaiting sentencing.
But There’s a Twist Here
Things don’t quite add up. Prosecutors claim Stokes went back on the dark web after he was arrested, apparently to try and cover his legal costs. That puts him in a pretty bizarre situation: he’s being prosecuted for cybercrime, but at the same time carrying on with similar activity in secret.
Related News:






