Oof, this sounds like a case where executives/management who knew about this tool and didn't act upon it should be charged with accessory-to-crime. There has got to be a moral imperative to act upon tools like this.