You know how easy it is to find bad admins in active directories? You cut access to all of them and then give it to them one at a time and see when the fuckery occurs. Because if an agency has one single admin account, that account can be accessed by anyone who has the account information.
Clowns would do this on tinychat back in the day and destroy chat rooms that were beating theirs