The websites of many Fortune 100 firms host publicly accessible files that reveal potentially sensitive metadata and other hidden information such as user names and email addresses, newly published research has revealed.