Do not report it at all - even anonymously! My friends wife works for one of the top digital forensics firms in the US (they're who lawyers use to understand what happened and when). He's told me too many unfortunate cases where people reported items likes this to Fortune 500 companies, that were then prosecuted harshly. I have issues with it - but it's how the world works. I would stay away from it.