Report them, spread the player's name... maybe have a bit more security in terms of who has access to the company chest (which it sounds like you have, since it doesn't sound like anything overly important was taken)