My insurance company and Synology would be my first targets. I'd gladly throw ~1k at each.
Of course, I suspect the true business model to be to do nothing. You sell the "service" to people customers, but your enterprise customers pay you a subscription fee to not execute the order. ELaaS: Everybody Loses as a Service
aka Rent Seeking as a Service
Take it further.
Tell the original customer that if the company pays to have this not done to them, they will get a portion of the proceeds. Many customers might even end up getting more back than they were originally stiffed for.
Scale it enough and it would be stupid for a customer NOT to do this