The person who alerts the authorities should be held liable - they had the option to verify before doing so, but chose not to.