All this says is that the support engineer didn't access the file. It doesn't say the attacker wasn't logged accessing it.