The only blessing in this story is that the miscreants made their damage so plainly obvious that the problems were identified quite quickly.
If they'd been a bit more subtle and a little patient, they could've engaged in massive identity theft and financial fraud without ever making it clear that AirBNB was the attack vector.
I was just thinking this. Presuming most AirBnB users rent regularly, you could quite easily swipe some jewelry (stuff at the bottom of the box) before anyone notices. Even if they do notice, they might go "I wonder where they went...?" and not even figure it was theft for a long time, if ever.
Even if theft was presumed, not only would multiple users have been in and out by that time, but you'd have no way of proving who took it, let alone have enough for the police to get a warrant. It sounds like the easiest money in the world.
The only blessing is that the person renting the property did not return early. If she had and had caught the renters in the act, who knows what would have happened.
If they'd been a bit more subtle and a little patient, they could've engaged in massive identity theft and financial fraud without ever making it clear that AirBNB was the attack vector.