Hahaha. Today my customer informed me about strange files in his /public_html/ Files were uploaded by OTHER user from Cpanel File Manager to WRONG directory under another owner

Root directory of uploaded files:
/home/2nduser/public_html/client/1stuserdomain.com/

What is wrong?