Even if you keep the circle small you have a bunch of people who will have access to the report. Include some people who can gain access if they want to, e.g. IT staff.

It takes one of them who strongly believes that this information should be public knowledge.