In a recent TIME essay, Ryan Pettit, a Hawaiʻi-based commercial airline pilot with a background in IT, recounts losing his money, his phone, and much of his digital identity to a single text message. His central point is something most of us overlook: almost everything we own online is tied to a single account, either an Apple ID or a Google login, and a phone number that every “forgot password” link redirects to.
Pettit’s story is ultimately about what happens when modern life is built around a single digital key.
As a pilot, he is accustomed to systems designed around redundancy. An aircraft cannot safely depend on one critical component working perfectly every time. There must be backups, and often backups for those backups. Yet, as Pettit discovered, his own digital life had almost none of that redundancy.
The attack began innocuously. On June 25, 2026, he received what appeared to be a routine Apple Card fraud alert and responded that the transaction was not his. Minutes later, he received a call that appeared to come from Apple Card’s legitimate support number. The caller knew enough of Pettit’s personal information, including his Social Security number and date of birth, to sound convincing.
Then Pettit watched the takeover happen in real time.
His payment cards disappeared from Apple Wallet. His trusted phone number was replaced. His devices began slipping out of his control. By the time he understood what was happening, the attacker had effectively turned Pettit’s own security systems against him. The very mechanisms designed to protect his accounts were now preventing him from recovering them.
The consequences quickly moved beyond his phone. Money was withdrawn, purchases were made, credit applications were submitted, and fraudulent payment requests were sent to his wife. Even his smartwatch was remotely erased while it was still on his wrist. The attack did not end when Pettit regained partial control; its effects continued to surface for weeks.
What made the ordeal especially frustrating was how difficult it was to find someone capable of helping. Police could take reports, but jurisdictional boundaries complicated the investigation. Apple’s support system could not easily override the security mechanisms that had been manipulated by the attacker. Pettit found more practical help through an FBI contact and, unexpectedly, through AI.
Using Claude as a kind of digital command center, Pettit says he was able to organize the chaos, work through recovery steps, prepare reports, complete complaint forms, and keep track of the growing number of compromised accounts. AI did not solve the crime, but it gave him something he desperately needed: structure at a moment when the situation was overwhelming.
The lesson Pettit draws is not that people should become suspicious of everything. It is that they should stop designing their lives around a single point of failure.
A phone number should not be the only way to recover a financial account. One password should not unlock every important service. A single device should not simultaneously contain someone’s money, identity, photographs, authentication tools, and recovery keys.
Pettit calls this approach diversification. The objective is not to create a perfectly secure life, something that may be impossible, but to create one that can absorb a serious breach without collapsing entirely.
In the end, resilience may be more valuable than paranoia. The question is not whether someone could eventually get through one layer of security. The question is what happens when they do.
Acknowledgement: This summary was generated using AI writing tools as part of my experimental learning process. For more information, check out the original article listed below.