it has been a year and still it is not resolved
It's not their problem to solve. Don't give it access to sensitive files on the first place.