Heck, I work in IT and can tell you that from his perspective he IS telling the truth. In the statement, they said that there is no tracking of access, just that something was changed. So any person can go look at it and there is zero tracking. In reality, he doesn't know if it has been breached since there is nothing tracked.