Sounds like they might have used the CEOs computer and perhaps he has a modified PDF report ready, downloaded the actual report but provided the altered version.

Agree with the other comments, the auditor should get the reports independently or use their own laptop to login/get the report.