You can easily give the data you collected and turn it over the FBI with a complaint (even if he and his site is in Canada or another country). 300K in USD is a serious crime and they will investigate and coordinate with Canada and other countries to gather additional evidence. But first there has to be a person filing a complaint that has legal "standing".