As a mod noob hey cool word i…

As a mod-noob (hey, cool word) i asked me how to proceed in such a case:
In a video of the WordCampWordCamp WordCamps are casual, locally-organized conferences covering everything related to WordPress. They're one of the places where the WordPress community comes together to teach one another what they’ve learned throughout the year and share the joy. Learn more. Hamburg the guy explained something in the settings section and showed a page where everyone could read his MailChimp APIAPI An API or Application Programming Interface is a software intermediary that allows programs to interact with each other and share data in limited, clearly defined ways.-Key. OK, i asked him if he really knows it and of course he was surprised of that and he asked me to eleminate this key and also his email-address. Now what is the next step?
Is it sufficient to inform the uploader and delete the file so he can upload a fixed version?
Do we have to reject the video? Or is he able to change the file by himself?