Answer:
The best course of action is following up with the person, apologizing, and requesting that they delete the email and do not open any attachments. It's also important to contact your organization's data security team. It might be a little embarrassing, but they need to know all the details