A hacker accessed a family's Ring security camera and told their 8-year-old daughter he was Santa Claus

A hacker gained access to the Ring security camera of a Mississippi family and used the speaker feature to harass their 8-year-old daughter, telling her he was Santa Claus and encouraging her to destroy the room.

Posted: Dec 13, 2019 9:51 AM
Updated: Dec 13, 2019 5:30 PM


Someone gained access to the Ring security camera of a Mississippi family and used the speaker feature to harass their 8-year-old daughter, telling her he was Santa Claus and encouraging her to destroy the room.

The horrifying ordeal is one of several recent incidents in which hackers have figure out a way to log into Ring accounts without the user's knowledge.

Ashley LeMay told CNN affiliate WMC she installed the camera in her daughters' room so she could watch over them while she works overnight nursing shifts. 'I did a lot of research on these before I got them. You know, I really felt like it was safe,' she told the affiliate.

The intrusion happened just four days after she installed it when she was running an errand and her husband was at home with the kids.

When her daughter Alyssa heard noises coming from her bedroom, the child went in to see what it was.

The Ring camera footage, obtained by WMC, shows Alyssa standing nervously in her room while Tiny Tim's rendition of 'Tiptoe through the Tulips,' a warbling song featured in the horror movie 'Insidious,' plays over the camera's speaker.

'Who is that,' Alyssa asks, after a man's voice fills her room.

'I'm your best friend. I'm Santa Claus,' the voice says. 'I'm Santa Claus. Don't you want to be my best friend?'

WMC reported the unidentified person continued to harass the girl, taunting her and encouraging her to destroy her room.

'I watched the video and I mean my heart just like ... I didn't even get to the end where she is screaming 'Mommy, mommy' before I like ran inside,' LeMay said.

Ring responds

In a statement sent to CNN, Ring said the hacker did not gain access through a data breach or compromise of Ring's security. Instead, the person likely took advantage of the family's weak account security.

'Customer trust is important to us and we take the security of our devices seriously,' the statement said. 'We have investigated this incident and can confirm it is in no way related to a breach or compromise of Ring's security.'

According to the statement, Ring users 'often use the same username and password for their various accounts and subscriptions.' If those were to fall into the wrong hands, those devices could be compromised.

'As a precaution, we highly and openly encourage all Ring users to enable two-factor authentication on their Ring account, add Shared Users (instead of sharing login credentials), use strong passwords, and regularly change their passwords,' the statement said.

Ashley told WMC she had not set up two-factor authentication on her device.

Others have been hacked and harassed

There were at least three other instances in the past week alone involving Ring devices.

On Wednesday morning, a father in Nebraska was shocked to hear a voice talking to his daughter through the Ring camera on their kitchen counter. He told CNN affiliate WOWT that he immediately unplugged the device and called Ring, who told him a third-party device had logged into his account.

Earlier this week, an Atlanta woman was in her bed when a man's voice came over her bedroom Ring camera, yelling that he could see her and demanding that she wake up, CNN affiliate WSB-TV reported.

On Sunday night in Florida, a Cape Coral couple was harassed by a person over their Ring camera who made racist comments about their biracial family, revealing that he had likely been watching them for days.

On each of these occasions, Ring said the system invasion was not the result of a breach or failure of Ring's security. Instead, the hacker had likely gained access to the family's account through weak or stolen login credentials.

How to avoid being a victim

Most customers, called 'neighbors' by Ring, buy the cameras hoping to get the peace of mind and protection the company advertises.

Steps can be taken to protect your personal data and make it more difficult for unknown people to gain access to your accounts.

Practicing good security habits with strong and unique passwords is the first step towards strengthening your account security.

Change default password immediately and avoid using phrases or dates that are significant to you, like birthdays or relatives' names.

Remembering multiple passwords is difficult, but password managers like 1Password or LastPass can help you keep your passwords secure but on hand for when you need to use them.

Two-factor or two-step authentication, like Ring encourages its users to set up, adds an additional layer of security on your accounts.

Two-step authentication involves a user entering a password followed by a prompt to either enter a code sent via text or email, swipe a fingerprint or provide another way to prove their identity.


An earlier version of this story misidentified the state where the LeMay family lives. They live in Mississippi.

Terre Haute
Overcast
73° wxIcon
Hi: 78° Lo: 60°
Feels Like: 73°
Robinson
Broken Clouds
70° wxIcon
Hi: 77° Lo: 59°
Feels Like: 70°
Indianapolis
Broken Clouds
73° wxIcon
Hi: 79° Lo: 61°
Feels Like: 73°
Rockville
Overcast
67° wxIcon
Hi: 77° Lo: 59°
Feels Like: 67°
Casey
Broken Clouds
71° wxIcon
Hi: 77° Lo: 59°
Feels Like: 71°
Brazil
Overcast
73° wxIcon
Hi: 77° Lo: 60°
Feels Like: 73°
Marshall
Overcast
73° wxIcon
Hi: 77° Lo: 59°
Feels Like: 73°
Afternoon Rain
WTHI Planner
WTHI Temps
WTHI Radar

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Confirmed Cases: 183224

Reported Deaths: 7714
CountyConfirmedDeaths
Cook1067134894
Lake11982440
DuPage11470510
Kane9200298
Will8592339
Winnebago3673124
St. Clair3610156
McHenry2941114
Madison218673
Kankakee168468
Rock Island158331
Champaign154419
Unassigned1337197
Peoria130234
Kendall128423
Sangamon101333
DeKalb84629
Boone72823
Jackson64419
McLean56215
LaSalle51518
Macon47323
Randolph4327
Adams4242
Coles39919
Ogle3715
Tazewell3698
Clinton33817
Williamson3295
Stephenson3176
Whiteside30816
Union30321
Grundy2815
Monroe27813
Knox2591
Iroquois2557
Vermilion2122
Henry2051
Cass20211
Morgan1965
Jefferson18717
Warren1800
Lee1462
Montgomery1437
Bureau1412
Marion1360
Macoupin1353
Franklin1290
McDonough12815
Perry1261
Christian1134
Effingham1131
Jo Daviess1121
Saline1111
Douglas1022
Woodford953
Livingston922
Pulaski910
Logan850
Mercer700
Jersey691
Clark660
Shelby601
Johnson570
Washington570
White570
Fayette553
Bond542
Jasper547
Moultrie530
Cumberland462
Menard460
Carroll453
Gallatin450
Piatt440
Wayne441
Lawrence420
Mason420
Ford411
Alexander360
Massac340
Hancock321
Wabash320
Crawford290
De Witt290
Edgar260
Fulton260
Hamilton220
Marshall210
Greene190
Hardin170
Schuyler160
Clay140
Brown130
Edwards130
Pike130
Richland120
Scott100
Henderson90
Pope80
Calhoun70
Putnam70
Stark70
Out of IL00

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Confirmed Cases: 67857

Reported Deaths: 2975
CountyConfirmedDeaths
Marion14710719
Lake7037269
Elkhart458276
Allen3611157
St. Joseph311479
Hamilton2489104
Cass17509
Hendricks1742105
Vanderburgh170012
Johnson1648118
Porter117439
Tippecanoe109411
Clark107545
Madison84265
LaPorte82929
Kosciusko81612
Howard80464
Marshall74222
Bartholomew73847
Floyd68444
Monroe68430
Noble63528
Delaware63352
Boone63246
Dubois62412
Hancock61637
Jackson5514
LaGrange54210
Shelby50926
Warrick50230
Grant49629
Vigo46810
Dearborn46128
Morgan41832
Henry36118
Clinton3523
White34510
Montgomery33821
Lawrence32627
Wayne3159
Decatur31332
Harrison28922
Miami2582
Scott24710
Daviess24319
Greene23834
DeKalb2214
Putnam2218
Jennings20712
Franklin20510
Jasper2032
Steuben1993
Gibson1984
Ripley1887
Perry17112
Starke1647
Orange16324
Wabash1583
Posey1570
Fayette1547
Jefferson1492
Whitley1486
Fulton1442
Carroll1422
Wells1312
Knox1290
Huntington1183
Washington1151
Spencer1133
Newton10910
Tipton1065
Randolph1024
Clay975
Jay820
Adams812
Rush794
Owen781
Sullivan751
Pulaski711
Brown701
Fountain632
Benton600
Blackford532
Ohio504
Parke451
Pike450
Switzerland430
Crawford420
Martin420
Vermillion380
Union320
Warren191
Unassigned0200