Absolute inside job. I worked in banks for over a decade and this is highly unlikely without security measures being disabled. Even if someone forgets to arm a system, fun fact, it will arm itself. Unless this bank was completely outdated with no tech at all.