Upon the termination of an employee, there was an oversight which led to their access to Google Cloud not being removed until two weeks after their departure. You are now tasked with investigating whether this employee accessed any sensitive customer information during the period after their termination.

What steps should you take to identify and confirm if the terminated employee accessed any sensitive customer data after their official termination date?