[lucasyvas]

If it were me I'd honestly do nothing. History has shown it's equally likely to be a lose-lose scenario. Let it remain as-is.

If it's related to protecting children or a vulnerable group, maybe report it. Otherwise, whatever.

Either way, don't do it in a way that they know it was you who found it.

[coffeeblack]

Isn’t any group “vulnerable”? What does that word even mean?

[loktarogar]

Vulnerable groups are physically, mentally, or socially disadvantaged persons. Can be groups like disabled folks, migrants/refugees, and children.

[MonkeyClub]

Everyone is vulnerable when it comes to identity theft, but the OP’s position, should they notify anyone, is a lose-lose one regardless.

Morally they should “do the right thing”, but as many have explained in the comments, this will end up costing anything from reputation to money to freedom.

It really sucks that the only sane advice here is to sit on it and move on :(