While cleaning near the west exhibit, museum janitor Carla noticed a small, blinking device hidden behind a vent. She passed it to Doug, her supervisor, who found several more wired to discreet cameras aimed at the visitor lounge and private art-viewing rooms.

Doug contacted the director, who confirmed the cybersecurity firm had installed the equipment without alerting staff or visitors. The next day, TV crews camped outside as police officers carried out boxes marked “EVIDENCE.”