You, you wouldn't know about the whitelist, it's internal and I only know about it due to a previous client having had your issue.

But going through legal channels and contacting the FBI are both things you should have known about, if you were involved on the business or remedial side of this issue since that's standard operating procedure.