Facebooks internal auditing of employee data access is world class. Not sure about what it was in 2010.

And your remark about performance metrics is irrelevant to the question of, who accessed this sensitive company data?