This is why you should be careful about what data you put out on your web site.  Just because there isn’t a link to it doesn’t mean that someone can’t find it.

…  Scan your company’s Web servers. Find the files that aren’t linked to your public Web site. Then track down their owners and remind them that whatever they put on a Web server is accessible to anyone on the Internet.

Point out that if someone on the Internet can guess the URL of a piece of business information, even if it’s not linked, it’s not safe. And that’s true whether the information is financial data, marketing plans or personnel records, and whether the guesser is a reporter, an employee, an investor or a competitor.

And if they think it can’t happen to them, tell them about Intentia. And remind them that your CEO probably isn’t desperate enough to call the cops if proprietary information leaks out by way of unnecessary, unlinked files on your company’s Web servers.

But he’ll probably know who’s guilty.