Tobacco company got smoked by leaving secret recipes on a file share

A pen tester found a tobacco company's trade-secret product recipes stored in a publicly accessible SMB file share (ports 139/445) with no access restrictions; the files were labeled 'Confidential' but were accessible to any employee. After reporting the issue the tester was forced to delete his copy, and the company later denied the files were real and removed or moved them, preventing further verification.