Follow your policy and procedures. Immediately report your suspicions to your supervisor or the IT department. Do not attempt to investigate on your own, as this could lead to further exposure.