DraftKings Fumbles Again: Customer Accounts Hacked in Credential Stuffing Blitz

DraftKings customers face a betting twist as hackers score big in a credential stuffing attack. Despite keeping sensitive data safe, the gambling giant urges users to reset passwords and enable multifactor authentication. Forget blackjack, it’s now all about the password shuffle!

Pro Dashboard

Hot Take:

It seems DraftKings is betting against the odds with their cybersecurity measures. Who knew that the house could lose this time? Credential stuffing attacks have left them scrambling like a bookie on Super Bowl Sunday. Better luck next time, DraftKings, and maybe invest in some better defense strategies—your customers’ data depends on it!

Key Points:

  • DraftKings recently informed customers of a security breach due to credential stuffing attacks.
  • Attackers accessed some customer data, but not sensitive financial or government ID information.
  • Customers are advised to reset passwords and enable multifactor authentication.
  • This isn’t DraftKings’ first tango with credential stuffing, as a similar incident occurred in November 2022.
  • The FBI has long warned about the rising threat of credential stuffing due to leaked credentials and automated tools.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?