The most ethical and responsible action is:
Option 1 → Correct.
Reporting responsibly ensures the issue is fixed while minimizing harm. You should not access or share sensitive files any further.
Option 2 → Not ideal. Ignoring it leaves others at risk, and the data remains exposed.
Option 3 → Wrong and risky. Downloading or contacting individuals directly is mishandling personal data, and could make you liable under privacy laws.
Option 4 → Very harmful. Sharing the link spreads the data exposure, causing further damage.
Thus, 1) Immediately report the vulnerability to the platform's administrator or the relevant cybersecurity authority and avoid accessing the files further is correct.
Hence, the correct answer is "Option 1".