no one even tries to stop website hijackers breaking thousands of websites steeling hundreds of thousands of credit cards.
local government?  suspects in foreign countries
normally web designer just update site and forget about it, where to report?

with copy of effected site it is not hard to get details about hacker (email address, ip addresses, etc), just no one does it, no wonder there are so many security problems