Thieves broke in through a second-floor window, but the museum has had other problems with unsecured Windows too, according to a decade-old cybersecurity audit report that has now come to light.