A method, apparatus, and computer-readable media for detecting a security breach in a network comprising an access point and a plurality of transceivers each having a different media access control address comprises, at one of the transceivers, receiving a signal from the access point, the signal representing one or more packets of data; determining a source media access control address for each of the packets; and transmitting an alert packet to the access point when the source media access control address of one of the packets is the media access control address of the transceiver.