What they need to so is show up in these threads, apologize for the delays (and the spam), and send the money. Otherwise, 2 cases go to a vote next week.
I am not sure it's enough, on top of cheating customers they spammed and violated customers privacy
Publicly firing the employee who violated client privacy would also be a good step.