My guess is that when the money in the ATMs didn't reconcile. It may be normal for a set of ATMs to be off by a few hundred a year, but anything higher than th

My guess is that when the money in the ATMs didn't reconcile. It may be normal for a set of ATMs to be off by a few hundred a year, but anything higher than the norm would be enough to set off alarms. After that, it just involves reviewing code checkins and camera footage. Just a guess, though. Hell, maybe he used ATM card first before each "heist".