I consulted some people who work in eForensics and they told me that nothing would be done. Notifying law enforcement wouldn't stop the masses of chargebacks we were having to both deal with and pay for.

Cybercrime is pretty rampant and there are many bigger players than this, plus I doubt any of the details I found were genuine. Realistically what would the law enforcement do?