It is quite clear why Russia didn’t threaten nuclear war over this cyber attack, given the list is mostly populated by their allies including China.

Russians perpetrated the SolarWinds hack and now Colonial Pipeline. In both cases Russian citizens attacked private corporations causing vast social implications. There is no indication at this point that the Russian government was involved in either attack, both are cases of criminals being criminals. The need for cybersecurity is greater than ever and growing constantly.