Something didn't "happen to him." He voluntarily did something that created an (allegedly inadvertent) security problem.