They say there operation was governed by Cyprus law, I think the data centre was in Bulgaria and it was run by Russians

Not sure why the US consider they have jurisdiction - maybe because some of the customers or wire transfers were from US? Or they traded $?