Hence postdocs on site, disgruntled faculty, the janitor, IT staff gone bad??? But this isn???t a national security site ??? it is a bloody university research department doing non-classified research, so it is virtually certain that people have e.g. ssh access or vpn access or even rdesktop access from outside of the firewall, and anyone with the right credentials then can waltz right in.