So, my work...

So I've just found out that my business disposes sensitive data from their client's right in a bin without even making that data unreadable or destroyed. This documents show businesses names, IP information from networks, SMTP infos... How should I proceed or do in this situation?

business businesses client data documents found information making names networks privacy sensitive sensitive data smtp work