She found the tracking device attached to her car.
She removed it. She told her mother what she had found and who she believed had put it there. She was shot and killed by the person she had named.
The tracking device had been doing its job for however long it had been on the vehicle before she found it. Every time she drove somewhere, the location was logged. Her workplace, her home, her routes between them, her stops, her schedule. None of this required any system access, any account breach, or any technical sophistication on the part of the person who placed it there. It required access to the vehicle long enough to attach a small commercial device available for purchase at retail.
The criminal complaint that followed her murder listed stalking and harassment as documented behavior preceding the killing. The physical surveillance was the final stage of something that had already been building through her digital presence and personal information before the tracking device was ever placed.
For a small business owner who drives a vehicle registered under a personal name, the vehicle registration is a public record in most states that can be queried against the name. The address that comes back is typically a home address. A device placed on that vehicle does not need to be sophisticated. It needs to stay in place long enough to map wherever the person goes.
She found the device and reported it. Neither step changed the outcome. The information it had already collected was enough for the person who placed it to know, at any moment, where she would be next.
Most Small Business Owners don't take action until they're forced to. By then, the exposure has already done its job. The RuleDraft Small Business Isolation Manual gives you the tested sequence to get ahead of the problem, instead of reacting to it.