Not sure if this has anything to do with the deletions, but I have commented before that it's much too easy to check the box at the top of a mailbox, hit Delete, and then erase everything in that mailbox.
Alas, I can offer no assistance with trying to prove who or what deleted those emails. As usual, good daily backups plus full archiving can be a "lifesaver" if implemented.