I should also think about the policies. Sharing private content without consent is against the law and ethical guidelines. My response should make them aware of the legal and moral implications, discourage any illegal activity, and advise them to report such content if they have access to it accidentally. It's important to handle this sensitively without providing any information that could be used to further distribute the content.