Wasn't it removed by the plugin developer already? If they don't acknowledge the privacy breach, then it technically doesn't/didn't exist tbh. And it's not like it's a wide-spread issue. It's very niche.