I’m guessing that nobody was watching the video feed during this time. After the attack, they reviewed the video and spotted him.
Which makes me wonder why do they have the live video feed if someone is not going to be there to check it for just these kinds of things????