A common vector for penetration of a secure site is via sudden HVAC maintenance needs.

If you’re smart/patient (as an intruder) you’ll build a quiet on-off legend of malfunctions before escalating to more serious system disorders that then demand attention when people are miserable.