Maybe. If they can identify which record was the last one changed and the last one changed its directly related to the one that made the change and the ended transaction statement successfully posted a transaction

If the SQL injection crashed that person's transaction there's little chance of finding the culprit