Most companies I've worked at recently have some sort of mechanism in place to prevent this. Portable drives disabled, email attachments monitored, etc.