Galen Marsh didn’t deny that he took Morgan Stanley client data before the bank fired him. The question remains how it ended up on a website.