He's posted saying that it was meant to be available internally only, but didn't set his permissions correctly:
https://plus.google.com/110981030061712822816/posts/bwJ7kAEL...
https://plus.google.com/110981030061712822816/posts/bwJ7kAEL...
Stuff like this can rot your company from the inside out, and being transparent about it (and even public) can help a lot.