Hacker News Reader

You will need a lawyer to determine your own liability here, to determine the best path to report this to the bank, and to check your contract to see how you can force the payment to be delivered. Save any and all communication between you and the contracting firm, ideally on a device that they do not control, and don't communicate in any way that can't be recorded for your own protection.

Once things reach this stage you need a lawyer

Get a lawyer and another job. Putting that data on GitHub may not be a crime, but what they are doing to you may be one.

You're not getting paid until you break the law.