You might want to look for the Protocols in your company for this situation did you have them given to you?

Reporting on these kind of findings are to protect client and employee you said there was no-one there when you all first saw this but no follow up may be the problem