DraftKings Fumbles Again: Customer Accounts Hacked in Credential Stuffing Blitz
DraftKings customers face a betting twist as hackers score big in a credential stuffing attack. Despite keeping sensitive data safe, the gambling giant urges users to reset passwords and enable multifactor authentication. Forget blackjack, it’s now all about the password shuffle!

Hot Take:
It seems DraftKings is betting against the odds with their cybersecurity measures. Who knew that the house could lose this time? Credential stuffing attacks have left them scrambling like a bookie on Super Bowl Sunday. Better luck next time, DraftKings, and maybe invest in some better defense strategies—your customers’ data depends on it!
Key Points:
- DraftKings recently informed customers of a security breach due to credential stuffing attacks.
- Attackers accessed some customer data, but not sensitive financial or government ID information.
- Customers are advised to reset passwords and enable multifactor authentication.
- This isn’t DraftKings’ first tango with credential stuffing, as a similar incident occurred in November 2022.
- The FBI has long warned about the rising threat of credential stuffing due to leaked credentials and automated tools.
Already a member? Log in here