Ok so the story begins by me buying a niche forum/website back in 2009 with some loyal members, lots of uvs and some pretty great content (especially user uploaded (and created) files for download). Over the next few years I let the site slip, it made money through adverse, but became spammy. Today I received this email: So I receive this and I'm passed. The guys domain is similar (but different) to mine, but he has somehow got the old forum user list, PMs, he downloaded all the download files (that members had previously uploaded) - again these were legal, user created files/software... Either the guy got them from the person I bought the software from, or he hacked the site. I only have my phone to work with for a few days while I'm on a trip (so tough to fully investigate this) but I'm furious - though I'm glad the guy also included me on his mailing list where he explained the wrongs he had done! He has an LLC in Portugal with the name of his venture. He has broken privacy laws, database+copyright infringement... Also if the seller (who I think was based in Australia) has given him all the 2009 files, then that is also a huge problem (i bought the site through Sedo). What would you do in this situation? A mess and not one that I want to throw money at, but one I feel he has just shot himself in the foot by giving me evidence of what he did and his plan.