Once you secure the folder, use Google’s URL Removal Tool in Search Console to request deletion of the cached index-of pages.
Create a blank index.html file or a 404.php script inside every subdirectory. Servers show the index only when no default page exists. Index-of-private-dcim
Content Management Systems (CMS) like WordPress have plugins for file management. If an administrator creates a "private" directory for media uploads but forgets to place an empty index.html file inside it, the server will default to showing an index. Once you secure the folder, use Google’s URL