quote:
“certainly would not know what our advocacy customers were doing with our tools.”
Okay, fine. But they must have a policy when those tools are used fraudulently and that is what appears to have happened. Their "customer" used the names of addresses of people to file comments that may or may not be the position held by those people. This is fraud.
So either they divulge the customer, or produce the necessary audit to determine the extent of the fraud, or be held liable themselves.