"and have a legal firm send them a warning they might be using hacked software."

Rather send a message directly through the software and give a link directly to purchase it. A bit cheaper and more straightforward, than finding out adresses and involve lawers. That should be the last resort.