I work in information security in a large organization. If I were informed about this, I’d immediately speak with Data Privacy personnel, HR, your manager and possibly your manager’s manager.