You are good! You had no obligation to keep that to yourself. The person in the wrong here was the CEO who failed to take basic steps to protect private information.