You can find them after the fact if they still have a persistent connection to you device (logs or radio isolation). Or perhaps they admitted to the fact?
Why not go after them? Why not go after all liable parties? What if the perpetrator is not in a jurisdiction where you can sue?
Btw, lookup the APT group "darkhotel" and their activities.
