Legally, they're allowed to modify and use GPL code internally without redistributing the source. The only mistake was publishing the source code to a public git repo without the LICENSE file, which may be a GPL violation.

I say "may", because I'm not sure if you have internal code on a public git or FTP server, is that consider "distributing"?