Mfcttrf

What would Earth look like at night in medieval times?

Could Sauron have read Tom Bombadil's mind if Tom had held the Palantir?

Does ultrasonic bath cleaning damage laboratory volumetric glassware calibration?

Fedora boot screen shows both Fedora logo and Lenovo logo. Why and How?

Bash echo $-1 prints hb1. Why?

Is adding a new player (or players) a DM decision, or a group decision?

Should I declare a faux wood object to customs when entering Australia?

Analog is Obtuse!

Is there any set of 2-6 notes that doesn't have a chord name?

Averting Real Women Don’t Wear Dresses

Cascading Repair Costs following Blown Head Gasket on a 2004 Subaru Outback

Does squid ink pasta bleed?

A player is constantly pestering me about rules, what do I do as a DM?

Why is Madam Hooch not a professor?

What is this particular type of chord progression, common in classical music, called?

Should I tell my insurance company I'm making payments on my new car?

Intuitively, why does putting capacitors in series decrease the equivalent capacitance?

Declining an offer to present a poster instead of a paper

How many codes are possible?

Fitting a mixture of two normal distributions for a data set?

Why does adding parentheses prevent an error?

Inverse-quotes-quine

STM Microcontroller burns every time

Why does the numerical solution of an ODE move away from an unstable equilibrium?

Should I report a leak of confidential HR information?

If you must report incriminating information about a 3rd party to HR, should you do so anonymously?How much information should I give my former boss when I lost a company key?Regaining trust from management and breaking chain of command to report positive informationHow do I report the improper use of social security numbers at work?Leaked confidential information about a management decision- should I make the management aware?Should I report this workplace thievery?Information Security hiringHow much information should be revealed to HR?Quitting employee has privileged access to critical informationH.R. gossiping confidential information + using political back channels

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;

0

I found that an employee who is no longer with us uploaded a giant Excel file containing HR information into Slack. The file is available to anyone in our Slack and contains names of all current and former employees, their contact details, full names, who has stock options, annual leave entitlements, HR history and various notes about them, but not the compensation details. The file is somehow there and can be found in search, but is not attached to any message or posted into any channel (not sure how that works).

Should I tell our CTO about this? Nobody should really be able to find this information, and we even have some vendors, interns and part-times on our Slack who can probably find it.

On the other hand, I don't have a plausible explanation for how I found this file (yeah, I was poking around our Slack on a weekend to see what I can find). I also think that whatever I say in the future, people will hear it with the thought "oh, this guy had access to our employment records" at the back of their head.

In other words, I lose nothing if I don't report it, and I might lose something if I do. We don't seem to have a method to report things anonymously.

Also, we are a fairly small company (less than 200 people), so we don't have any official published policies regarding any of this.

professionalism management human-resources security confidentiality

share|improve this question

edited 36 mins ago

maronto

asked 42 mins ago

marontomaronto

122 bronze badges

New contributor

maronto is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

0

I found that an employee who is no longer with us uploaded a giant Excel file containing HR information into Slack. The file is available to anyone in our Slack and contains names of all current and former employees, their contact details, full names, who has stock options, annual leave entitlements, HR history and various notes about them, but not the compensation details. The file is somehow there and can be found in search, but is not attached to any message or posted into any channel (not sure how that works).

Should I tell our CTO about this? Nobody should really be able to find this information, and we even have some vendors, interns and part-times on our Slack who can probably find it.

On the other hand, I don't have a plausible explanation for how I found this file (yeah, I was poking around our Slack on a weekend to see what I can find). I also think that whatever I say in the future, people will hear it with the thought "oh, this guy had access to our employment records" at the back of their head.

In other words, I lose nothing if I don't report it, and I might lose something if I do. We don't seem to have a method to report things anonymously.

Also, we are a fairly small company (less than 200 people), so we don't have any official published policies regarding any of this.

professionalism management human-resources security confidentiality

share|improve this question

edited 36 mins ago

maronto

asked 42 mins ago

marontomaronto

122 bronze badges

New contributor

maronto is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

I found that an employee who is no longer with us uploaded a giant Excel file containing HR information into Slack. The file is available to anyone in our Slack and contains names of all current and former employees, their contact details, full names, who has stock options, annual leave entitlements, HR history and various notes about them, but not the compensation details. The file is somehow there and can be found in search, but is not attached to any message or posted into any channel (not sure how that works).

Should I tell our CTO about this? Nobody should really be able to find this information, and we even have some vendors, interns and part-times on our Slack who can probably find it.

On the other hand, I don't have a plausible explanation for how I found this file (yeah, I was poking around our Slack on a weekend to see what I can find). I also think that whatever I say in the future, people will hear it with the thought "oh, this guy had access to our employment records" at the back of their head.

In other words, I lose nothing if I don't report it, and I might lose something if I do. We don't seem to have a method to report things anonymously.

Also, we are a fairly small company (less than 200 people), so we don't have any official published policies regarding any of this.

professionalism management human-resources security confidentiality

share|improve this question

edited 36 mins ago

maronto

asked 42 mins ago

marontomaronto

122 bronze badges

New contributor

maronto is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited 36 mins ago

maronto

asked 42 mins ago

marontomaronto

122 bronze badges

New contributor

maronto is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited 36 mins ago

maronto

asked 42 mins ago

marontomaronto

122 bronze badges

New contributor

maronto is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 42 mins ago

marontomaronto

122 bronze badges

New contributor

maronto is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 42 mins ago

marontomaronto

122 bronze badges