Seriously... I've downloaded 2TB in a week before.
I get that it's not about the bandwidth, though; it's about needing to upgrade their security since they scraped the site without needing to log in, so obviously their site wasn't secure. They're claiming IT costs as damages.