It’s the stack of a few individually explainable things — no one getting the finger-prick test, a complaint you’ve never received before, unusual requests to delete things, a fire alarm at just the right time — that makes them all suspicious.