Laws generally say that state secrets are illegal to possess unless authorized regardless how you got them. You should notify and delete them if you get them by mistake

So him not deleting them when asked was a bold move.