A 19-year-old from Madison, Wisconsin, has pleaded guilty to conspiracy to commit computer intrusion in connection with a scheme to hack user accounts at a fantasy sports and betting website.
According to federal authorities, Joseph Garrison, 19, of Madison, Wisconsin, conspired to steal hundreds of thousands of dollars from the accounts of innocent victims.
The scheme involved a ‘credential stuffing attack,’ in which Garrison and his co-conspirators collected stolen credentials or username and password pairs obtained from large-scale data breaches and used them to gain unauthorized access to accounts held by the same user with other companies and providers.
Using this method, Garrison and his co-conspirators stole approximately $600,000 from approximately 1,600 victim accounts.
Law enforcement executed a search on Garrison’s home in February 2023, where they located programs typically used for credential stuffing attacks, as well as files containing nearly 40 million username and password pairs.
Garrison is scheduled to be sentenced by U.S. District Judge Lewis A. Kaplan on January 16, 2024, and faces a maximum sentence of five years in prison.
The case is a reminder of the importance of online security and the need for individuals to protect their personal and financial information.
Garrison’s guilty plea is a significant step in holding him accountable for his actions, and we will continue to work to ensure that those who engage in cybercrime are brought to justice.
Related Federal Cases
- Aaron T. Moul, Placing Threatening Telephone Calls and Cyberstalking, Wisconsin 2020 · New York
- Timothy Justen French Sentenced to 45 Months for Cyber-Attack Campa… · Tennessee
- Adeyemi Adekunle, Cyber Fraud, MS 2015 · New York
- Timothy Justen French, Cyber-Attack, Illinois 2023 · New York
- Kya Christian Nelson, Swatting, California 2020 · New York
Key Facts
- State: New York
- Category: Cybercrime
- Source: DOJ Press Release â†â€â€
ðŸâ€Â’ Get the grimiest stories delivered weekly. Subscribe free →

