Accidentally saw a private photo of my boss on the workplace file storage

Question

Today at work, I stumbled upon a collection of private photos taken by my two bosses (they are a married couple, and own the business). The photos in question are of a lewd nature of one of them. They are stored on a server where anybody in the company can access these files.

It is part of my role to organise and keep the file storage clean ("clean"), so it is not out of place for me to look around in random folders.

How should I move forward in this situation? Should I delete the photos and say nothing, should I tell my bosses about my discovery, or should I do nothing and try to move on like nothing happened?

Answer 1

I have run into exactly this issue where I came across some personal files that a coworker had accidentally (I assume) copied to a public folder. I sent my coworker an email and let them know the files were there and that anyone could access them. They were very appreciative and took care of it immediately.

Don’t make this more complicated than it has to be. Let them know privately about the issue and then let them handle it. If it was unsecured company proprietary information or something illegal, then it would require more intervention. You don’t have to explain what the contents of the files are... Just say that you stopped looking as soon as you realized they were personal.

I would act as if the pictures you found were innocuous but personal, for example, pictures of their vacation. I would send their owner an email (or some other text communication so they can easily copy the path to the files) that says something to the effect of “I stumbled across what seem to be some personal files of yours in this public folder. I just wanted to make sure you knew that they were there in case it was an accident.” Don’t let on that you know the files were particularly sensitive, because it needlessly complicates things.

Answer 2

The important thing is to be as discreet as possible. It would be best if you could avoid them thinking you know the content of the pictures at all. Hopefully, you stopped viewing them when you realized what the content of one of them was. Depending on the contents of the folder, you may be able to get away with an innocuous email about image files being stored in a public folder. I'm assuming you can tell which of the owners created the files by looking at the properties.

Case 1: The owners think the files may be private (e.g. they're in a folder \\computer\\share\\BossName), but they don't realize the folder is public. In this case, you could simply email them saying they have a public folder shared and ask them if they would like to make it private, then you could simply alter the permissions and not hint that you've looked at any of the files.

Case 2: The images are in a folder where there probably shouldn't be images, e.g. they're in \\computer\\share\\Spreadsheets. You could email the person that created the files, saying there are a bunch of image files in this directory and ask if the images belong in a Spreadsheets folder, or if they should be moved somewhere else.

Case 3: It is REALLY messy, all kinds of files are in the folder and they don't clearly belong to one of the Bosses. In this case you could email them saying the public folder is full of a mishmash of file types and tell them you'd like to separate them by type like images, spreadsheets, text files and ask them to take a look since they created some of those files.

In all cases, I think you should be discreet. If they come right out and ask you if you viewed any of the images, you should tell the truth:

Yes, I opened one not knowing what the content might be and wanted to save you any embarrassment by letting you handle it. These are public files at the moment and any user in the network could stumble across them so we should move them or protect them so people don't have access.

This is assuming that you didn't spend 30 minutes viewing all the pictures like a creep :)

Answer 3

I do wonder about the circumstances of your discovery. Is this particular aspect of your job intended to make sure that storage space isn't exhausted or is it to make sure that people aren't engaging in appropriate activities on the company dime?

If the former then it doesn't seem like you'd need to open up any of the files. You could just report to a higher up, saying "there's 500GB of data in this directory - can we delete it or back it up and delete it?" or some such.

If the latter then... are these files accessible by everyone or just by you and the owners? If the former then I'd tell the owners asap. Like who knows, maybe other people have already come across the files and just not told them. If the latter then I'd probably just forget what I saw and consider anything accessible only by the three of y'all as being exempt from your searches henceforth.

Answer 4

I think that you should simply, and somewhat-cryptically, let the couple know that maybe they should take a look in "this particular folder." And let it go at that.

And, be discreet. Never tell anyone else.

They're a married couple, and they're the business owners. If they want to be kinky, that's their business.