A database of people who have access to databases, cross-referenced with a database of people who have abused database access, only accessible by the most rigorous of procedures, etc, etc. should solve this.

Sure, $10 billion seems like a lot to stand up two postgres containers, but can you really put a price tag on something like this?