Lottery company's security director used a thumb drive to insert software that produced predictable winning numbers