How to report unintentionally disclosed data that I probably shouldn't have seen?

A while ago in one drive on my kids school m365 account (the tenant is for the whole school district) I was able to find information that really shouldn't be shared with everyone (employees and students) or my kid has messed up permissions. Information was some email passwords (I didn't test them), and even a document that listed private information about students and special accommodations they need. I also found a bunch of random stuff that doesn't matter like work …

account cybersecurity data drive email employees find information kids m365 one drive passwords permissions report school school district students