Security issue - need advice - G Suite - Team Drives

[TwistedHelixis]

The deputy head just received an email requesting access to document that is not on our website, and is in our Team Drives area. We also have link sharing turned off and nobody can share from Team Drives to outside the domain.

 

Whats going on and how do I trace how they found the document.

 

One thought is, why would the email have been sent to our deputy head when Team Drives are a shared area?

 

Thanks

[TwistedHelixis]

Its OK I think. Just found the document on our website.

[FN-GM]

Just wondering why you would consider this a security issue? You're safeguards seemed to have worked. There was no unauthorised access.

[TwistedHelixis]

When I checked the website page I thought it might have been on and it was not there, I was then wondering how on earth someone outside our domain would be able to request access for a document they can't even see. all sorts of things went through my head, hence the post.

 

I then did a search for all the documents on the site and found it on another page, so it was at least a public facing doc, that anyone could click on.

[FN-GM]

It can also happen when someone forwards an email with a link to a document to someone external or someone who doesn't have permission.