Dear Sirs: I have been called upon by firm (on behalf of St. James hospital) to investigate the possible wireless compromise detected, which has continued for the past three or four weeks. Although I initially believed that the purported event was a false alarm, our firm s audit of the hospital s wireless appliance configuration indicated that certain unauthorized activities have indeed taken place. The hospital s Wireless Access Points (WAPs) contain an access list of authorized devices with which they can communicate. These addresses are often referred to as Media Access Control (MAC) addresses or hardware (HW) addresses. All rogue addresses that had been added to the device shared the same hexadecimal prefix with the devices used in the hospital. This indicates that the rogue devices used to expand the hospital s network were manufactured by the same firm (Lucent) as the hospital s authorized wireless appliances. Based on current published research, I believe that whoever carried out these attacks against the hospital wireless network was skilled and well-funded. After carrying out a number of  war walks  around the hospital perimeter, I found that the attacker used at least four, and perhaps five, wireless access points to extend the hospital s wireless coverage. This is not the sort of equipment that most people have laying around in their basement, let alone the purported perpetrators, a group of teenage boys.