Based on the provided log details, the account of the Software Developer was used to gain unauthorized access. This account should be disabled to prevent further breaches, especially considering no one from the organization was working during the holiday, suggesting a compromised account.