It’s unlikely as he said ICT typically pull the hard drives for destruction. If he knows they normally keep drives for secure destruction then he should know not to take a device that has drives. If that is the case then OP is negligent and should be punished for his actions/crime. He may also be sued for theft of intellectual property if the drives had any data on them, and destruction of intellectual property if he wiped them.

If it’s just a chassis with no drives, and ICT we’re keeping it because it was too good to bin, or it had rare hardware they might require later, then it is not such a big deal.

I think OP needs a lawyer as he may very well be in legal trouble if caught.