I suppose yes they should be liable if they were testing it in the middle of the street?

And in this case it would not be that at all.

They were tested in a building that was secured, but poorly secured. The question now is did they realize their building was poorly secured and what actions did they take after they realized what happened.