My plan is to report to the police, report to the company (in that order), and then get a lawyer and touch nothing else of the companies systems until the issue

My plan is to report to the police, report to the company (in that order), and then get a lawyer and touch nothing else of the companies systems until the issue is resolved. I don't give a damn what the company policy is, that shit is so corrosive that I'm not doing anything with it beyond reporting it to the authorities and then protecting myself. edit: What is UGC/NCMEC? Acronym soup.