Security EAP650

My EAP 650 desktop controller functions and works fine, but a few weeks ago, I had a cyber attack, where through my phone or Omada Web Controller, the person gained access. The person deleted some clients and the device itself.

I had taken screen shots of each action, and the clients affected.

I know who is doing, I changed the password, and I keep the SIM out of my mobile. I had the face recognition enabled and the attack still happened.

Can anyone recommend any other options.