On October 19th, 2025, an unusual scene unfolded at the Louvre in france, initially appearing as a routine delivery. A furniture hoist was used by four men, two of whom ascended to a first-floor balcony, hinting at a meticulously planned robbery, or even a louvre heist, rather than a simple moving operation. Their high visibility vest suggested a disguise for this audacious act.
They used a furniture lift, angle grinders, and eight minutes. The Louvre lost $102 million in crown jewels — during opening hours, with visitors in the building. A security guard watched and filmed it on his phone.

But here's the part the news didn't tell you: the people who protect the Louvre saw this coming. For a decade. Auditors flagged the exact balcony. The exact method. Six years before it happened. And every year, someone with the budget decided it could wait.

The password to the Louvre's surveillance system was "Louvre."

In this episode, I trace the heist back through a decade of ignored warnings, a workers' strike, and a $92 million security budget that only showed up after the jewels disappeared. This isn't a story about bad security. It's a story about what happens when people with the checkbook decide the risk is acceptable — until it isn't.

🔒 SECURITY UNPACKED — How a Security Mind Sees Everything
New episodes weekly.

📌 SOURCES
Every claim in this episode is sourced from public record — French Senate testimony, government audits, published reporting.

🔗 LINKS
Website: https://securityunpacked.com


#louvreheist #securityunpacked #truecrime

In August 2023, six inmates at a modern facility in New Orleans exploited a vulnerability that shouldn't have existed. They didn't need Hollywood-style tunnels or complex hacks—they simply physically removed a sink-toilet combo unit and walked into a maintenance chase that led straight to the outside world.

In this video, we unpack how a high-tech perimeter collapses when "Value Engineering" takes priority over physical security. We look at:

The "Permeable Membrane": How budget cuts turned a reinforced barrier into a simple frame wall.
The Ultimate Auditors: Why inmates are the most effective security testers, weaponizing boredom to find the flaws guards miss.
The Human Element: How understaffing and complacency turned a potential property damage report into a full-scale manhunt.
The Illusion of Solidity: Why shiny, heavy objects aren't always secure, and the critical lesson this jailbreak holds for your own security protocols.
Security isn't just about what you buy; it's about what you watch. If you're trusting a lock or a firewall just because it looks solid, you might be making the same mistake as the Orleans Justice Center.

Timestamps: 0:00 The humid Sunday night escape
1:40 What is "Value Engineering"?
3:15 The weaponization of boredom
5:10 Tools left behind: Trash to gold
6:00 The moral: Appearance vs. Reality

If you found this breakdown helpful, consider subscribing to Security UnPacked for more deep dives into the world’s most interesting security failures.

🔒 SECURITY UNPACKED — How a Security Mind Sees Everything
New episodes weekly.

📌 SOURCES
Every claim in this episode is sourced from public record.

🔗 LINKS
Website: https://securityunpacked.com
The Security Buzz: https://securityunpacked.com

#SecurityUnPacked #PrisonBreak #PhysicalSecurity #SecurityFailure #VulnerabilityAnalysis #ValueEngineering

On September 10th, 2023, the famed Las Vegas Strip, often called "sin city," faced an unprecedented tech crisis. Slot machines at the Bellagio went dark, and guests at the MGM Grand were locked out, causing widespread disruption in casino operations. This event highlights the vulnerabilities within the modern las vegas casino experience, affecting gambling and daily life in the city.

September 2023. Slot machines at the Bellagio are showing error messages. Room keys don't work. Restaurants go cash-only. Staff are paying out winnings from fanny packs. MGM Resorts — a $34 billion company running 48,000 hotel rooms — is paralyzed.

The attack that caused all of this started with a phone call. One call to the IT help desk. About ten minutes long.

The group behind it? Not a foreign government. Not elite hackers. Teenagers. They found an employee on LinkedIn, called the help desk pretending to be that person, and talked their way into a password reset. Ten minutes later, they had the keys to everything.

Three days earlier, the same group had already hit Caesars using the same trick. Caesars paid $15 million in ransom. MGM refused to pay — and lost $100 million. Same technique, two targets, $115 million in damage. From phone calls and a LinkedIn search.

In this episode, I break down exactly how it happened step by step, why the help desk agent wasn't the problem, and why the system that's supposed to protect your company is actually designed to let attackers in.

🔒 SECURITY UNPACKED — How a Security Mind Sees Everything
New episodes weekly.

📌 SOURCES
Every claim in this episode is sourced from public record — SEC filings, FBI advisories, published reporting. Full source list in the episode script.


🔗 LINKS
Website: https://securityunpacked.com
The Security Buzz: https://securityunpacked.com

#mgmhack #socialengineering #securityunpacked