Yes,

I guess that the professionals found a contaminated forensic environment with no clear division of ownership? not much you can do there?

I mentioned sleuthkit as anyone with half a brain in IT could have done a much better "forensic" report. But as far as I know this hasn't been done.
True, but we wouldn't have let it happen in the first place? When redeploying you always wipe and reinstall?