As a mod-noob (hey, cool word) i asked me how to proceed in such a case:
In a video of the WordCamp Hamburg the guy explained something in the settings section and showed a page where everyone could read his MailChimp API-Key. OK, i asked him if he really knows it and of course he was surprised of that and he asked me to eleminate this key and also his email-address. Now what is the next step?
Is it sufficient to inform the uploader and delete the file so he can upload a fixed version?
Do we have to reject the video? Or is he able to change the file by himself?