If anyone from Phase is reading this: if it is known for sure that this data was either obtained illegally or is being spread by a malicious actor,
get a court order.
This is a completely different scenario than the last time with the Lia dox two and a half years ago, and it should be approached as such properly.
Null will probably remove the content, and is guaranteed to turn over relevant retained user data, though how much use that would be is up in the air, as it would probably be safe to assume someone leaking information like this would be using TOR, or at the very least a VPN.