I would advise them to consult an indpendent company for a complete security audit of their IT systems.
How condescending .
Had you read my posts, you would have known that we did hire experts without waiting for your advice..
We rebuilt a complete production environment from scratch.