The home was located in a gated community with a professionally installed smart home system, including surveillance, access control, and a managed Wi-Fi network. The wireless network name included the family’s last name, making it identifiable from outside the property. 

An individual walking through the neighborhood located the network and began testing login credentials obtained from a previous third-party data breach. One device on the network had not received recent firmware updates, which allowed access beyond the initial connection point. 

Once inside the network, the attacker accessed email accounts used by the household. Over several days, he reviewed communication patterns between the family, their staff, and outside vendors. Messages were then sent that appeared consistent with prior conversations, including revised payment instructions tied to an active transaction. 

Funds were transferred based on those instructions before the activity was flagged as fraudulent. Law enforcement was contacted after the transfers were completed. A portion of the funds was recovered, but a significant amount was not. 

The access point into the network was a combination of reused credentials and an unpatched device.