An 18-year-old Wisconsin man named Joseph Garrison, along with others, is accused of hacking and stealing thousands of sports betting accounts. According to court documents, they stole $600,000 from 1,600 accounts on an unnamed sports betting site. The U.S. Attorney’s Office for the Southern District of New York stated that Garrison turned himself in to New York authorities on Thursday and faces six counts, including unauthorized computer access and wire fraud.
If he is convicted on all charges, he could face up to 57 years in prison. Garrison and others used a credential stuffing attack to access accounts. They used usernames and passwords stolen in previous data breaches to gain access. In total, hackers accessed around 60,000 accounts on sports betting websites. Five months before the sports-betting website breach, Garrison told Madison police investigators that he participated in previous credential stuffing attacks.
A federal attorney representing Garrison declined to comment on the case. Mr. Garrison was released on bail on Thursday, but he is banned from using any internet device apart from a court-monitored cell phone and computer.