If it were me I'd honestly do nothing. History has shown it's equally likely to be a lose-lose scenario. Let it remain as-is.
If it's related to protecting children or a vulnerable group, maybe report it. Otherwise, whatever.
Either way, don't do it in a way that they know it was you who found it.