Wow that's some serious shit!
Is there anyway that you could get some more info?
Info like who is the company? if you can disclose such info
a copy of the "tracking pixel" so it could be analyzed by more people and see who else could be behind this.
Unfortunately I have heard of similar things happening in some countries in Latin America.