That's right. Now that there is authoritative proof, heads should roll.
You would love some of the nitty gritty in that report. There was a lot of evidence concerning
log files that were deleted and then recovered by the auditors (shoulda used BleachBit!). They deleted the records that showed direct internet connections in the days before the start of the audit.
Also, there were shared login users to make it difficult to pin an action on a human. Fortunately, one of the witnesses spoke of surveillance pictures that identified some of the people behind the user names, so there is a good chance heads
will roll, unless the weasel AG blows it off.
He wants to be the US Senator in 2022, so he might be motivated to do the right thing.