The last big case involved an airbnb where the shared key to the apartment was basically known by the attacker.