There really isn't a check in/check out system because under regular circumstances you're not supposed to take it out of the building period. The only rare exception is it you have courier authorization to transport it from one SCIF to another, but I got a feeling this wasn't the case especially since it was on a thumb drive. People just end up walking it out the building and somebody he works with must have tipped him off to the feds.