Unauthorized backups, how to seize back data? [migrated]

It appears that someone at my company (likely using stolen admin credentials) had set up backups for the whole org on G Suite using Backupify and Spinbackup. We need to secure the data. Unfortunately the login for Backupify seems to be something other than a company email.

How do we legally seize our data from these backup services and make sure nobody else has access to it?

(Of course it’s likely that whoever set up these has a copy of all data already but that’s a separate problem)