For immediate action check his hosting provider and see if they have a policy against copyright violation. If they do, mail them and ask them to take the site down. Don't know how that works but it's a start.