Am I the only person that really doesn't see the problem here?
Firing him is a no-brainer here, if this story is even true.
EDIT: he also opened a large portion of the company's codebase to potential sabotage. If I was in Company X's shoes right now I'd be doing a full audit of everything this joker has touched since he started, in addition to a full internal security audit of everything this mystery third party had access to. This kind of security breach is a Big Deal.