[LtWorf]

If his goal was to keep the data he wouldn't have reported it?

[svrtknst]

That doesnt necessarily track. He could have stolen the data, then reported it to clear his own name. He did access more data than he needed to prove that there is a likely breach.

[LtWorf]

His name didn't need clearing.