A hacker accessed a family's Ring security camera and told their 8-year-old daughter he was Santa Claus

A hacker gained access to the Ring security camera of a Mississippi family and used the speaker feature to harass their 8-year-old daughter, telling her he was Santa Claus and encouraging her to destroy the room.

Posted: Dec 13, 2019 9:51 AM
Updated: Dec 13, 2019 5:30 PM


Someone gained access to the Ring security camera of a Mississippi family and used the speaker feature to harass their 8-year-old daughter, telling her he was Santa Claus and encouraging her to destroy the room.

The horrifying ordeal is one of several recent incidents in which hackers have figure out a way to log into Ring accounts without the user's knowledge.

Ashley LeMay told CNN affiliate WMC she installed the camera in her daughters' room so she could watch over them while she works overnight nursing shifts. 'I did a lot of research on these before I got them. You know, I really felt like it was safe,' she told the affiliate.

The intrusion happened just four days after she installed it when she was running an errand and her husband was at home with the kids.

When her daughter Alyssa heard noises coming from her bedroom, the child went in to see what it was.

The Ring camera footage, obtained by WMC, shows Alyssa standing nervously in her room while Tiny Tim's rendition of 'Tiptoe through the Tulips,' a warbling song featured in the horror movie 'Insidious,' plays over the camera's speaker.

'Who is that,' Alyssa asks, after a man's voice fills her room.

'I'm your best friend. I'm Santa Claus,' the voice says. 'I'm Santa Claus. Don't you want to be my best friend?'

WMC reported the unidentified person continued to harass the girl, taunting her and encouraging her to destroy her room.

'I watched the video and I mean my heart just like ... I didn't even get to the end where she is screaming 'Mommy, mommy' before I like ran inside,' LeMay said.

Ring responds

In a statement sent to CNN, Ring said the hacker did not gain access through a data breach or compromise of Ring's security. Instead, the person likely took advantage of the family's weak account security.

'Customer trust is important to us and we take the security of our devices seriously,' the statement said. 'We have investigated this incident and can confirm it is in no way related to a breach or compromise of Ring's security.'

According to the statement, Ring users 'often use the same username and password for their various accounts and subscriptions.' If those were to fall into the wrong hands, those devices could be compromised.

'As a precaution, we highly and openly encourage all Ring users to enable two-factor authentication on their Ring account, add Shared Users (instead of sharing login credentials), use strong passwords, and regularly change their passwords,' the statement said.

Ashley told WMC she had not set up two-factor authentication on her device.

Others have been hacked and harassed

There were at least three other instances in the past week alone involving Ring devices.

On Wednesday morning, a father in Nebraska was shocked to hear a voice talking to his daughter through the Ring camera on their kitchen counter. He told CNN affiliate WOWT that he immediately unplugged the device and called Ring, who told him a third-party device had logged into his account.

Earlier this week, an Atlanta woman was in her bed when a man's voice came over her bedroom Ring camera, yelling that he could see her and demanding that she wake up, CNN affiliate WSB-TV reported.

On Sunday night in Florida, a Cape Coral couple was harassed by a person over their Ring camera who made racist comments about their biracial family, revealing that he had likely been watching them for days.

On each of these occasions, Ring said the system invasion was not the result of a breach or failure of Ring's security. Instead, the hacker had likely gained access to the family's account through weak or stolen login credentials.

How to avoid being a victim

Most customers, called 'neighbors' by Ring, buy the cameras hoping to get the peace of mind and protection the company advertises.

Steps can be taken to protect your personal data and make it more difficult for unknown people to gain access to your accounts.

Practicing good security habits with strong and unique passwords is the first step towards strengthening your account security.

Change default password immediately and avoid using phrases or dates that are significant to you, like birthdays or relatives' names.

Remembering multiple passwords is difficult, but password managers like 1Password or LastPass can help you keep your passwords secure but on hand for when you need to use them.

Two-factor or two-step authentication, like Ring encourages its users to set up, adds an additional layer of security on your accounts.

Two-step authentication involves a user entering a password followed by a prompt to either enter a code sent via text or email, swipe a fingerprint or provide another way to prove their identity.


An earlier version of this story misidentified the state where the LeMay family lives. They live in Mississippi.

Terre Haute
Clear
36° wxIcon
Hi: 44° Lo: 31°
Feels Like: 30°
Robinson
Clear
36° wxIcon
Hi: 45° Lo: 30°
Feels Like: 30°
Indianapolis/Eagle Creek
Partly Cloudy
34° wxIcon
Hi: 43° Lo: 32°
Feels Like: 28°
Paris
Partly Cloudy
32° wxIcon
Hi: 43° Lo: 30°
Feels Like: 32°
Mattoon/Charleston
Clear
34° wxIcon
Hi: 43° Lo: 30°
Feels Like: 27°
Terre Haute
Clear
36° wxIcon
Hi: 43° Lo: 31°
Feels Like: 30°
Terre Haute
Clear
36° wxIcon
Hi: 44° Lo: 30°
Feels Like: 30°
Clear & Cold
WTHI Planner
WTHI Temps
WTHI Radar

Latest Video

Image

Two women facing charges in Capitol violence appear virtually for court

Image

Offering women the much needed care they deserve

Image

House passes stimulus bill

Image

Overnight: Clear and cold. Low: 22°

Image

Recent Trends in the Local Real Estate Market

Image

Dangers at Wallace Ave.

Image

Knox County plans two seperate COVID-19 vaccine outreach clinics

Image

Rick's Rallies

Image

ISU Hoops

Image

Zoe Stewart

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Cases: 1186613

Reported Deaths: 22735
CountyCasesDeaths
Cook4743979359
DuPage767651196
Will65037893
Lake59517921
Kane50746717
Winnebago28340439
Madison27987455
St. Clair25440466
McHenry24315265
Champaign18105126
Peoria16897262
Sangamon16128217
McLean14601157
Tazewell13521240
Rock Island13065286
Kankakee12496189
Kendall1105986
LaSalle10798219
Macon9457185
Vermilion8564116
DeKalb8265112
Adams8003114
Williamson6796121
Whiteside5926147
Boone592371
Clinton557189
Coles519691
Grundy512063
Ogle502073
Knox5017132
Jackson461060
Effingham449269
Macoupin435079
Henry432956
Marion4262111
Livingston419877
Franklin414566
Stephenson409675
Monroe406583
Jefferson3976115
Randolph396378
Woodford367560
Morgan358776
Montgomery349568
Lee335243
Logan331053
Bureau330773
Christian330568
Fayette306452
Perry305457
Fulton285244
Iroquois277160
Jersey249646
Douglas244432
McDonough232740
Saline229747
Lawrence229624
Union218536
Shelby213934
Crawford200723
Bond190924
Cass188822
Pike169150
Clark168630
Wayne167448
Hancock167129
Warren166444
Richland163538
White160825
Jo Daviess160522
Ford158445
Washington158323
Carroll157634
Edgar154237
Moultrie149124
Clay142841
Greene137932
Johnson134712
Piatt132714
Wabash130012
Mason128641
Mercer128033
De Witt127922
Massac127133
Cumberland119218
Jasper110917
Menard10368
Marshall83815
Hamilton78815
Schuyler6775
Pulaski6706
Brown6636
Stark54122
Edwards52310
Henderson49814
Calhoun4782
Scott4491
Alexander4488
Gallatin4374
Putnam4153
Hardin34412
Pope2823
Out of IL00
Unassigned02219

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Cases: 661673

Reported Deaths: 12573
CountyCasesDeaths
Marion906391639
Lake48389876
Allen35806635
Hamilton32056396
St. Joseph29947512
Elkhart25376414
Vanderburgh21245378
Tippecanoe20000201
Johnson16336359
Porter15957270
Hendricks15813300
Clark11946181
Madison11741316
Vigo11595229
Monroe10328161
Delaware9836179
LaPorte9761196
Howard9055197
Kosciusko8561109
Bartholomew7448147
Warrick7412150
Hancock7404131
Floyd7200169
Wayne6631191
Grant6424157
Morgan6084125
Boone608288
Dubois5903111
Dearborn547067
Cass544399
Marshall5423104
Henry542093
Noble509078
Jackson464566
Shelby460290
Lawrence4180112
Gibson401281
Harrison399663
Clinton395453
Montgomery386783
DeKalb385178
Knox357285
Miami357263
Whitley349136
Huntington343976
Steuben338155
Wabash331176
Putnam329759
Ripley327061
Adams323149
Jasper315943
White297352
Jefferson294873
Daviess285396
Fayette271556
Decatur270888
Greene261280
Posey260831
Wells258274
Scott250350
Clay241044
LaGrange240870
Randolph225576
Spencer217130
Jennings215044
Washington211027
Sullivan203239
Fountain201442
Starke188051
Owen182153
Fulton178237
Jay177728
Carroll176518
Perry173235
Orange171250
Rush164722
Vermillion160442
Franklin159435
Tipton146341
Parke139216
Pike127632
Blackford120627
Pulaski106444
Newton96531
Brown94939
Benton91913
Crawford90613
Martin80114
Warren75814
Switzerland7537
Union67110
Ohio53311
Unassigned0431