What if there were lots of of successful hacks and this just happened to be the outlier because an admin was online and looking at the system at the exact momen

What if there were lots of of successful hacks and this just happened to be the outlier because an admin was online and looking at the system at the exact moment the hack occurred? Any large adversary would compile a huge number of ways to disable infrastructure, then use them all at once, rather than one at a time.