It is part of the players' rights for the staff team to never access his/her account and we stand by that. Besides, there are very few people that we can trust with the ability to spawn or access banks.
Currently we cannot delete items from people's banks besides actually 'hacking' them by changing their password and enter the account, which we refrain from. Mainly because it will register the account to our name and IP adress, it will change the password of the account thus refraining the owner from accessing it without having to explicitly inform them of this, and also because we do not 'hack' our players as part of the rights mentioned aforehand.
We do not spawn the items back for the player that got his items stolen, because we simply do not have the time to verify this and support this manual system and this process would actually duplicate the items (in case the hacker gets unbanned in the future) because we do not delete the items from the hackers' bank.
Having to log all of these processes while also executing and verifying them would put an tremendous strain and bureaucratic process on the few people that might be able to be trusted with this, with an increased risk of abuse by both staff and player alike. Thus we currently have no policy on returning the items other than with the hacker's cooperation as this would impose both stress and risk on the player service we can offer on this server.