It has all the characteristics of a witch hunt

I think that you are missing the point here. Andy has proof that Naomi used his credentials to log in as him on foxite. Now, I can only surmize how she obtained them - his credentials for logging in to the UT were exactly the same as the ones that he used to use to log in to foxite. Perhaps, as UT consultant, Naomi might have access to those credentials and used them to fraudulently log in to Andy's account on foxite.

Do you see a problem with this? I most certainly do.

And I most certainly would not call this behavior professional or helpful. I would call it illegal.