Ugh, and he/she could have gotten a box for an evening for fraction of a cent or something. To even think about using company infrastructure for this seems really very uneducated. Ok, that wouldn't also have been stupid, but at least you wouldn't put your company at risk.