Good suggestions ... and you had me scrambling around looking for things!
First, the images are in a database (but I don't know how to look in the attachment table to see the attachment. A mySQL query?)
I'd rule out users deleting attachments intentionally, I've spoken with my employees who have accounts on the forum. Besides, I've checked now and, no, they don't have permission to delete.
The space limit is interesting and not one I had considered. I don't believe I've set a limit, but how would I check? There does not seem to be this space limit setting in the Attachments section of the usergroup and the settings in Options > Message Attachment Options has the "Limit Space Taken Up By Attachments" set to 0. Is there some other location I need to be investigating?