How can I find out when a USB device was disconnected without ejecting?
Try the Console log at var/log/asl/2015.04.08.U0.80.asl or similar
(there will also be a G80 &amp; a U501 with similar dates but it's the U0.80.asl you want)

Apr  8 17:38:35 macname kernel[0] &lt;Notice&gt;: disk6s1: media is not present.  
Apr  8 17:38:35 macname kernel[0] &lt;Notice&gt;: msdosfs_fat_uninit_vol: error 6 from msdosfs_fat_cache_flush


Tested empirically on a disposable USB key ;-)