Maybe hire better protection partners?

Damage control from the PR team shouldn’t be allowed to fix this. Publicly name the “protection partner,” publicly end their contract, apologize, and develop a transparency plan going forward.

Then don’t issue a takedown request at the registrar.