Re: Sounds like a social engineering attack
"Maybe the firmware should call home if it detects the hard drive has been changed..."
Or even some form of active monitoring so the owners know which of their machines are running low on cash, powered down, unexpectedly rebooting, system crashes etc.. You know, the normal stuff a sysadmin would be expected to do when looking after a fleet of computers.