The Locked-Out Login

Three employees were terminated months ago. Their system accounts were never deactivated. Someone is logging in using their credentials — after hours, from unknown devices. Find who.