Update!
Today the email spamming stopped, strangely enough the website of our ex-customer isn't reachable anymore

Guess their provider has done something to the account.
We have contacted the police, I guess the guy will end up with just a slap on the wrist. *sigh*