Both commit crime. The sender obviously put the info where it shouldn't be. The sender and recipient are both required to report this immediately. BTW, after

Both commit crime. The sender obviously put the info where it shouldn't be. The sender and recipient are both required to report this immediately. BTW, after that gets reported, a normal expectation would be that all computers get powered off and then handed over to the security people. This may be why things didn't get reported. The server and Blackberry would have been taken and likely destroyed.