Shocking article to be honest. Totally tarnishing T3Lead's name due to the actions of one of their affiliates. The only way they even are linking T3 to the hackers is because they hackers are using T3's CCL number. I could set up a website today that says it is owned by Trinity Mirror... but it doesn't mean it is.
In T3's system, they will have no idea that 1000paydaycashloan.com have hacked BicycleSafe, or any other website, as the referral data will simply be listed as 1000paydaycashloan due to the tactic that was used in the "hack". Yet the Mirror seem to be suggesting T3 are entirely complicit in this.
Google is far more in the wrong here than any other party to be honest. They have the dataset, they can see what is happening to these hacked sites, yet they are refusing to get on top of it. This has been a significant problem, not only in the payday loan sector, for a very long time now. By ranking these hacked sites, in some cases for a long period of time, in top slots for very high paying search terms, they are fueling the fire.