they should work to keep these problems from spreading outside of their legal team

When they've already been cut off, it's a bit too late for that.

I don't mind if part of the company spends a couple days focusing on this. They need to figure out a plan for the customers that got cut off, too.

It doesn't sound to me like they've "completely taken their eye off the ball". What are you basing that on?