Since I went through something similar recently, one of the best things to do is to get in touch with the CERT local to the company and tell them what the issue

Since I went through something similar recently, one of the best things to do is to get in touch with the CERT local to the company and tell them what the issue is. They can be pretty effective in pushing companies to solve the problem.