As the theory surrounding a “wrench attack” emerges as a potential motive in the February 1 kidnapping of Nancy Guthrie, experts caution that criminals are increasingly using the internet to identify wealthy individuals who may make ideal targets.
According to Lisa J. Miller, a former detective and law enforcement executive, “Bad actors utilize open-source and social media insights to pinpoint their targets, their weaknesses, and areas of interest. Companies revealing their wealth through press releases, or individuals showcasing lavish lifestyles on social media, contribute to the problem. Many of us inadvertently display the happiest moments of our lives to an audience that includes potential threats.”
Though wrench attacks can involve intricate cryptocurrency dealings, encrypted messages, and international intrigue, at their core, they rely on a straightforward method. A “mastermind” orchestrates attacks from a distance, engaging local criminals to execute kidnappings through intimidation for ransom.
So far this year, 34 wrench attack incidents have been reported, which marks a 41% increase compared to last year, according to the cybersecurity firm Certik.
Nancy Guthrie, who is 84 and the mother of NBC’s Savannah Guthrie, illustrates how such attacks can extend to more accessible family members, with Miller noting how the actual targets of these attacks may often be those closer to the public figures.
“Someone may have been observing Nancy,” Miller pointed out. “Her appearance on shows may have presented an opportunity for those looking to exploit her connection to Savannah.”
Everyone is advised to reduce the personal information available about themselves online. This includes limiting visibility on social media profiles and being cautious about sharing images that showcase living spaces or financial security. “Monitor your online presence,” Miller emphasized, “As it’s crucial to be aware of how much information is publicly accessible.”
While some services exist to assist with securing personal information online, it’s acknowledged that navigating the digital landscape poses challenges in an era where sharing life’s highlights is commonplace.
“It’s easy to overlook safety,” Miller noted. “We’ve all wanted to share pictures of our pets or grandchildren, but it’s important to remember not everyone looking at these posts has good intentions.”
Furthermore, the majority of wrench attacks have been documented in France, with the U.S. following closely behind.
In the case of Guthrie, experts point to a tactic called “proxy target selection,” where a criminal might choose to abduct a relative rather than the wealthy individual themselves. In this instance, there was an initial ransom demand of $6 million involving cryptocurrency.
However, law enforcement has yet to confirm any direct link between Nancy Guthrie’s case and wrench attacks.
The Pima County Sheriff’s Department has clarified that they have not received any reports related to wrench attacks in the area. The investigation into Nancy Guthrie’s disappearance remains active, with any significant updates expected to be shared publicly.
Moreover, Sheriff Chris Nanos mentioned that investigators have been made aware of the report regarding Guthrie’s case. Savannah, who has openly discussed her family roots in Tucson, faces a stark reality where others, though less in the spotlight, have still drawn unwanted attention through displays of wealth.
If Savannah was indeed a target, there’s a strong possibility that the perpetrator observed her for quite some time. Miller speculated that thorough research could have been conducted to identify vulnerabilities, especially since Savannah has established security precautions in her life.
Currently, the investigation remains ongoing, with hints that the masked figure captured by Nancy’s doorbell camera might be a hired individual, suggesting a larger, more sophisticated operation at play.
“It’s crucial to understand that those targeted by such predators are often not at fault for simply being victims to individuals driven by malice,” Miller concluded.



