If the school is anything like the school I teach in, students must sign out to use the restroom. Would be easy enough to check the sign out books of all the classroom and see who was out of the classroom at the time of the incident.
The student had left an assembly.
He (and possibly others) may not have had to sign out in an assembly situation.