Heathrow is investigating how and why files containing security information were stored without any protection on a USB stick found by a member of the public.