The Jaguar hack cost the UK $2.5Bn and dropped production to levels you'd normally only see during open warfare. Recovery took many months, and the financial damage persists today.
We still operate with a primitive homunculi where a gunshot is considered aggressive, but sabotaging infrastructure that can kill hundreds from cold is being waved at.
I am. Why arn't we doing more against "Russian" hacking, because:
1. They outsource it
2. It rarely has clear red flags, eg "Putin's IP showed up on our PC before the virus"
So, I'm generalizing the argument about why direct action rarely occurs: It's because even if theres a great deal of evidence, the fuzzy logic required to say "this is statistically true" is rarely used.
We still operate with a primitive homunculi where a gunshot is considered aggressive, but sabotaging infrastructure that can kill hundreds from cold is being waved at.