Local IT guy in the company is only person to help most likely, it would be first person to reach for such sneaky task. Either he would know or would have logs.
Though, seems hard to solve, especially if he is out of US/Europe.
Yeah. But if he's not the culprit he's the best person to help.
Also, unless there's a personal vendetta, the biggest motive for someone doing this is someone that doesn't want to pay the expense of an employee on leave for awhile.
Though, seems hard to solve, especially if he is out of US/Europe.