Regardless of whether they protected that person, they would appear (IANAL) be liable for damages under the Uniform Trade Secrets Act - given their understanding of how significant the device was and where it was from - and if it's true they paid big $ for it, they'd be liable to have those damages doubled for improper methods of acquiring the thing.
http://thetradesecretsblog.wordpress.com/trade-secrets-law/c...