Yes, it's a bit of a massive story to digest without knowing what he actually did.

If it was accessing user data, of course he should be fired.