This is where the Internet is bringing up problems. The server he hacked into is in the US therefore the US authorities considered the offence to have taken place in the US whereas you or I might comsider that the offence took place in the UK. Perhaps we could avoid extraditing him by prosecuting him here under English law? Would double-jeopardy then come into effect?