I work at a large manufacturing facility that makes drugs- so they have money. Our facility is just a small piece of a multi billion dollar conglomerate. Someone, somewhere, made a huge mistake and a folder that should likely only be accessed by payroll and HR is accessible to anyone with access to the “public” server. There is a folder on this public server that has all of the information of every individual at the site. I mean everything. I can look back years and see every salary, every allocation to retirement, every day off ever taken. Somehow it seems that nobody has noticed yet, since this folder is still publicly accessable to the approximately 1000 employees at our site. I've been creeping on this subreddit for a while and feel that it is my due diligence to let those around me know that there is an impressive gap between us and management. I need to know if there are repercussions to releasing this data. I'm not overly concerned with them finding out it's me as I am currently interviewing at a competitor's and have a good chance to move there. My concern is to that this company has deep pockets. Tens of billions in revenue. The competitor is also close to my current employer with many direct lines. A classic case of what to do. Do I send a site wide email? Would there be legal repercussions? What do.