The complaint alleges that Joseph Garrison unlawfully accessed DraftKings accounts in November 2022 by launching a “credential stuffing attack”, which inputs stolen credentials – such as usernames and passwords – into login pages for other services.
The indictment states that Garrison gained access to an estimated 60,000 DraftKings player accounts by doing this.