Wait, he was using a work account on a company-owned device? I don't see how that can be called a "private message" at all.
Most likely from his personal YM! account.
The real problem was using YM! for work conversations. But if the company involved did not have its own internal messaging setup... it's an easy mistake to make.