I would contact the primal team with a link to the user and ask them to start scanning for this stuff or else it’s gonna keep happening.
Would also be good to see if they have information on their IP so they can send this information to the proper authorities.