This alert confirms that the first one wasn't a fluke. It adds complexity and raises the stakes.

Five minutes later, the automated fire suppression system reports a sudden spike in ambient temperature, or data loss prevention software flags an massive, unauthorized file transfer. 3. The Climax (Alert 3: The Critical Point)

Keep it subtle but undeniable. This creates curiosity or initial concern for your characters (or incident responders).