Do you want to know why spy agencies don't immediately kill foreign spies? Because they're useful. Once you find out about one, and they don't know you're on to them, you can feed them misinformation all day and their side will buy it. This is also why the FBI and other agencies don't immediately shut down terrorist cells, drug cartels, or other entities that should be nuked into orbit, because so long as they exist, they're organized, you can watch them, you can track them. You know what they're up to, where, and why. And if they try anything big, you can stop them.
The cybersecurity firm knew what it was doing. It was investigating, as VShojo pointed out, convincing law authorities that what was going on was a legit threat, building intelligence, gathering information, finding out who, where, why, and when. It was only when the fuckers acted with the phishing campaign that they responded to shut down the doxx site and the domain, but they could do that because they knew what was going on. They weren't caught pants down by it. Unfortunately, a couple of people got phished in the process, but better just the two than dozens. The investigation was going to wrangle the entire group up into mediocrity and ineffectiveness until they either quit or blew their wad and exposed themselves for criminal processes. The Nux came along and torpedoed the whole thing.
That's the problem.