I'm not sure who I would call first, but if it led me to the FBI then I would probably expect the Computer Hacking and Intellectual Property Unit (from leereeves link) to do the investigation/prosecution. It also seems odd that the FBI would respond so thoroughly on such a short notice, as if they had already been communicating with the company, although that could just be because he was about to leave the country.