This was my first thought. Just zero code review going on? Some random server only that dude knew about? tf kind of controls these people have in place?

Oh right, none of the shit the company should have had.

Instead of jail time, the government should consider giving this guy whistleblower status and investigating the corp for negligence.