I agree, capture as much hard evidence of their lack of security (and conversely evidence of what they have advertised as security) as you can before they play touch-ups. Also check over to see what their T&C say in the contract you signed with them. If what you said is true you've almost definitely been targeted by someone who has visited the facility. I doubt they're stupid enough to store the stolen goods at the same facility though.