A hacker accessed a family's Ring security camera and told their 8-year-old daughter he was Santa Claus

A hacker gained access to the Ring security camera of a Mississippi family and used the speaker feature to harass their 8-year-old daughter, telling her he was Santa Claus and encouraging her to destroy the room.

Posted: Dec 13, 2019 8:51 AM
Updated: Dec 13, 2019 4:30 PM


Someone gained access to the Ring security camera of a Mississippi family and used the speaker feature to harass their 8-year-old daughter, telling her he was Santa Claus and encouraging her to destroy the room.

The horrifying ordeal is one of several recent incidents in which hackers have figure out a way to log into Ring accounts without the user's knowledge.

Ashley LeMay told CNN affiliate WMC she installed the camera in her daughters' room so she could watch over them while she works overnight nursing shifts. 'I did a lot of research on these before I got them. You know, I really felt like it was safe,' she told the affiliate.

The intrusion happened just four days after she installed it when she was running an errand and her husband was at home with the kids.

When her daughter Alyssa heard noises coming from her bedroom, the child went in to see what it was.

The Ring camera footage, obtained by WMC, shows Alyssa standing nervously in her room while Tiny Tim's rendition of 'Tiptoe through the Tulips,' a warbling song featured in the horror movie 'Insidious,' plays over the camera's speaker.

'Who is that,' Alyssa asks, after a man's voice fills her room.

'I'm your best friend. I'm Santa Claus,' the voice says. 'I'm Santa Claus. Don't you want to be my best friend?'

WMC reported the unidentified person continued to harass the girl, taunting her and encouraging her to destroy her room.

'I watched the video and I mean my heart just like ... I didn't even get to the end where she is screaming 'Mommy, mommy' before I like ran inside,' LeMay said.

Ring responds

In a statement sent to CNN, Ring said the hacker did not gain access through a data breach or compromise of Ring's security. Instead, the person likely took advantage of the family's weak account security.

'Customer trust is important to us and we take the security of our devices seriously,' the statement said. 'We have investigated this incident and can confirm it is in no way related to a breach or compromise of Ring's security.'

According to the statement, Ring users 'often use the same username and password for their various accounts and subscriptions.' If those were to fall into the wrong hands, those devices could be compromised.

'As a precaution, we highly and openly encourage all Ring users to enable two-factor authentication on their Ring account, add Shared Users (instead of sharing login credentials), use strong passwords, and regularly change their passwords,' the statement said.

Ashley told WMC she had not set up two-factor authentication on her device.

Others have been hacked and harassed

There were at least three other instances in the past week alone involving Ring devices.

On Wednesday morning, a father in Nebraska was shocked to hear a voice talking to his daughter through the Ring camera on their kitchen counter. He told CNN affiliate WOWT that he immediately unplugged the device and called Ring, who told him a third-party device had logged into his account.

Earlier this week, an Atlanta woman was in her bed when a man's voice came over her bedroom Ring camera, yelling that he could see her and demanding that she wake up, CNN affiliate WSB-TV reported.

On Sunday night in Florida, a Cape Coral couple was harassed by a person over their Ring camera who made racist comments about their biracial family, revealing that he had likely been watching them for days.

On each of these occasions, Ring said the system invasion was not the result of a breach or failure of Ring's security. Instead, the hacker had likely gained access to the family's account through weak or stolen login credentials.

How to avoid being a victim

Most customers, called 'neighbors' by Ring, buy the cameras hoping to get the peace of mind and protection the company advertises.

Steps can be taken to protect your personal data and make it more difficult for unknown people to gain access to your accounts.

Practicing good security habits with strong and unique passwords is the first step towards strengthening your account security.

Change default password immediately and avoid using phrases or dates that are significant to you, like birthdays or relatives' names.

Remembering multiple passwords is difficult, but password managers like 1Password or LastPass can help you keep your passwords secure but on hand for when you need to use them.

Two-factor or two-step authentication, like Ring encourages its users to set up, adds an additional layer of security on your accounts.

Two-step authentication involves a user entering a password followed by a prompt to either enter a code sent via text or email, swipe a fingerprint or provide another way to prove their identity.


An earlier version of this story misidentified the state where the LeMay family lives. They live in Mississippi.

Mississippi Coronavirus Cases

Data is updated nightly.

Confirmed Cases: 69986

Reported Deaths: 2011
CountyConfirmedDeaths
Hinds5768121
DeSoto375331
Harrison265136
Madison248972
Jackson239145
Rankin232238
Jones194762
Forrest185857
Washington172244
Lee156342
Lauderdale143993
Neshoba130694
Lamar124115
Bolivar115636
Warren113735
Oktibbeha113639
Lowndes110240
Panola109117
Sunflower107127
Lafayette101820
Scott101720
Copiah97128
Leflore95968
Pike95137
Holmes92349
Yazoo87013
Pontotoc8579
Grenada85626
Lincoln84643
Monroe83155
Simpson82131
Leake79927
Coahoma78913
Wayne78921
Tate74630
Marshall7299
Union70017
Marion68921
Adams64226
Covington63715
Winston63516
George6038
Pearl River56740
Newton55511
Tallahatchie54711
Attala53325
Walthall51121
Chickasaw48819
Noxubee46312
Tishomingo4449
Prentiss44110
Alcorn4395
Calhoun4269
Smith41213
Claiborne40914
Hancock40915
Jasper4089
Clay40414
Itawamba39510
Tippah38814
Tunica3657
Montgomery3456
Clarke34328
Lawrence3298
Yalobusha31810
Humphreys29912
Quitman2751
Carroll26211
Greene26213
Perry2488
Webster24813
Amite2406
Jefferson Davis2406
Kemper24014
Stone2245
Wilkinson22013
Sharkey2065
Jefferson1967
Benton1541
Choctaw1384
Franklin1352
Issaquena272
Unassigned00

Alabama Coronavirus Cases

Confirmed Cases: 101496

Reported Deaths: 1821
CountyConfirmedDeaths
Jefferson13463261
Mobile10671216
Montgomery6955153
Madison551035
Tuscaloosa432780
Unassigned398568
Baldwin371029
Shelby336137
Marshall319938
Lee272447
Morgan242520
Etowah219034
DeKalb185214
Calhoun182819
Elmore176739
Walker154865
Houston145013
Russell13912
Limestone137813
St. Clair137520
Dallas134725
Franklin130822
Cullman123812
Colbert122518
Lauderdale120320
Autauga118822
Escambia109417
Jackson10724
Talladega106914
Tallapoosa87679
Dale85029
Chambers84838
Chilton8279
Blount8255
Clarke82110
Coffee7796
Butler77336
Covington74621
Pike7167
Marion58726
Barbour5816
Lowndes57524
Marengo56817
Bullock49211
Hale48826
Winston45711
Bibb4535
Washington44913
Perry4464
Wilcox43610
Monroe4246
Pickens41110
Randolph40311
Conecuh39410
Sumter36618
Lawrence3563
Macon34114
Crenshaw3318
Choctaw28912
Cherokee2798
Clay2775
Geneva2652
Henry2643
Greene25311
Lamar2302
Fayette2235
Cleburne1291
Coosa1053
Out of AL00
Tupelo
Broken Clouds
82° wxIcon
Hi: 82° Lo: 73°
Feels Like: 86°
Columbus
Clear
80° wxIcon
Hi: 82° Lo: 72°
Feels Like: 85°
Oxford
Few Clouds
90° wxIcon
Hi: 89° Lo: 70°
Feels Like: 96°
Starkville
Scattered Clouds
86° wxIcon
Hi: 82° Lo: 69°
Feels Like: 92°
WTVA Radar
WTVA Temperatures
WTVA Severe Weather