Previous user took a very huge risk. I've seen similar stuff happen, you can get sued (along whoever told you, but you need proof) just for the sake of making an example in front of the rest of the company.