There are enough people on here who can point you in the right direction, or arrange introductions.
Spend at least one of those millions on PR and lawyers to ensure it's clear who has the moral high ground, and who should be hired if a company has to choose between you - I mean if they are prepared to breach copyright so blatantly here, who knows what other problems they have in their repos - enterprises can be very conservatice on unknown legal risks like that
Summary: They are vulnerable - Get 'em