One would hope that there is enough sophistication in the security control such that it could identify who had swiped themselves in & out in the preceding hours, thereby perhaps identifying the perpetrator.
Of course, the person could have entered with a stolen badge.