I don't think any of the solutions to this problem posted here are satisfactory.
Here is my proposition - it is not perfect, but I think it is more suitable:
Make a list of those people who we know satisfy any of the following criteria:
1) Distributed hacks
2) Used the hacks
3) Were aware of the distribution or use of hacks, and didn't say anything.
This list can be presumed to automatically include all of ON management, but not all ON players.
The punishment should be the following:
1) 1 year ban for everyone on this list, in all abiding servers. After 1 year, these players are only allowed to play in abiding servers if they are clanless. If they create or join a new clan, they will be prohibited from playing.
2) Disallow players who belong to a clan managed by any of these players from playing, permanently. So, for instance, if Hunting creates a new clan, [OT], and John joins OT, John will not be allowed to play in any abiding server whilst being a member of OT. If he leaves OT, he can play again. This also means that no current innocent ON players can play until they leave ON.
The logic underpinning this punishment:
1) It is unfair to ban players who may not have been aware of the distribution or use of hacks.
2) The leaders of ON and the others on the list have abused the informal clan system to damage the game and community.
3) If only ON is banned, the players in its management can just make a new clan, and cause damage again.
4) Therefore a suitable punishment for them would be not just to remove their clan, but to remove their ability to ever make a clan again, or ever be part of one.
5) This truly punishes those responsible, while not allowing their foolishness to ruin the game for those in ON who are innocent.
Problems with this plan:
1) The list we make will be limited, as we cannot be fully aware of who has or did what. This is unavoidable, but it is better that we miss one or two than we unnecessarily punish one or two. The remaining, non-banned ex-ON players can be put on a 'watchlist' for server admins.
2) ON management might evade this punishment by changing their names, IPs, and online identities. Sadly this is a problem that all forms of banning are susceptible to in VC:MP - it is not unique to this situation.
3) This plan is more complicated than just banning ON, it might be hard getting servers all on board. Yes, it is a little complicated. But we as a community have to be as determined to prevent hacking as those who wish to perpetrate it, otherwise the bad guys will win. Fortunately there is at least one admin from every major server who has posted in this thread, and in most cases server management have posted here too.