"Any incriminating evidence is long gone"
Depends. If the SEC is involved, there will be official statements to investors, mandatory reports, etc. etc.
And actually it's far easier to destroy a single server that tons of documents on several ones, even when you're Facebook - and someone could have kept a copy of compromising ones to save his or her butts if indicted.