Forgive my stupidity, but cleaning up from data issue would be time, usually. Unless they got compromised and wiped.
It would have costs, but shouldn't KO a company.
Even if they got gut punched by the WHMCS issue, that damage should have been reported to customers back then. Can't say if...