You just plugged in a USB device you found. This drive was placed here as part of an authorized security awareness exercise by your organization's security team.
In a real attack, this single action could have installed malware, stolen your credentials, or given an attacker a foothold into the corporate network all before you noticed anything was wrong. Nothing malicious happened here.
What you should do instead
- Never plug in USB drives, cables, or devices you find or receive unexpectedly.
- Hand any found devices to your IT or security team; do not connect them "just to see what's on it."
- When in doubt, report it. Reporting is always the right call!
No sensitive data was collected, this notice is for
educational purposes only. Please safely eject the drive and hand it back to the
IT or security team.