If the disgruntled staff member simply copied the code over then surely there would be no way to track down who it was? Even if they found a staff member had accessed tonnes of source code before they left, how could they prove it was that person who leaked it?