Assume as the article states that it is two people.
Here's a partial list of the tasks these two people would have had to do:
Trace exactly how the intrusion happened.
Identify which processes failed. This means not only the process which meant this person kept their SecureID, but also the process which should have shut down access via that SecureID. I have several SecureID's in a drawer in my desk from previous system accesses. This doesn't mean I can still log in to those systems.
Modify those processes so the failure doesn't happen again ever. Depending on what failed this could be anything from adding some text to a process document to identifying a subtle deficiency in hardware or software.
Restore the deleted access.
Document what was done, why it was done, who did it, and then ensure it is all ready for the audit that is going to happen next week because of this.
None of this work would have needed to be done had this person resisted the silly urge for obvious and stupid revenge.
About one month's work for all of the above is reasonable and $50 an hour is downright cheap.
If it has syntax, it isn't user friendly.