A worker lost a USB stick containing personal data which was later found by a member of the public.