There might be some weak technical measures worth improving, but they may not have been the root cause of this access. >When they checked the login being used,

There might be some weak technical measures worth improving, but they may not have been the root cause of this access. >When they checked the login being used, they discovered an employee's credentials were being used on days he wasn't scheduled to work.