"So far he doesn't think anything has been 'stolen' "

Other than than his normal Friday night in the local?
Are there not Cyber-Police for this sort of thing? It must be a piss easy job (for someone else) to trace and block the, thing, word I cant think of (or never knew) 'cause I'm just back from the pub. I.p address. That's the gubbins.