If you’re based in Europe/UK then go down the line of GDPR right to erasure. If you’re in the UK then go down the line of an ICO complaint for non-compliance.