Calendar appointment deletion

Our company has experienced someone deleting calendar events on a shared calendar. All permission levels have been double checked. We have discovered an unknown email account and deleted it. The problem persists. How can we be certain that events created in a shared calendar are not deleted by unknown users? Occasionally, a known user shows as the person that has deleted the event, when they have not. Has our account been hacked and what can we do to secure it?