One of our client's websites was recently cloned and hosted on the back of a hacked .org TLD. The cloned site immediately trumped our client's website in rankings and severely impacted their SEO (sales dropped drastically). The sneaky part was that the cloned site was only displayed to GoogleBot and normal users were redirected to a website in China selling fakes. Google support were completely unresponsive and didn't understand the problem. In the end we just blocked the scraping website's IP address from accessing our site - unfortunately sales were affected for over a week.