it has been a year and still it is not resolved
It's not their problem to solve. Don't give it access to sensitive files on the first place.
It's not their problem to solve. Don't give it access to sensitive files on the first place.