It shouldn't be hard. On Box, you can have it notify you every time someone downloads any file in a given directory or even specific files. I assume they have at least comparable infosec, if not explicit tripwires/honeypots in files that should never be downloaded.