Thank you so much for the insight. The more I talked to ATF agents, it was more clear that a physical address for that website is a real business and may or may have not been aware of their identity being compromised. The first ATF Dallas agent I talked to lived down the street from that address and she actually drove past there and let me know about it. I now have the ATF Dallas, National Cyber Crimes division and Arlington PD all informed with all information. Haven't heard back from anyone else besides ATF Dallas. But ATF cannot do much for me since there is no physical firearm involved that changed hands. So they said the cyber crimes or the Arlington PD may contact me at some point. However the cash involved is fairly small and I don't expect to hear from them anytime soon. People on the forum have been supportive and helpful. I'll definitely keep the forum thread updated with any progress. Thank you.