It is quite clear why Russia didn’t threaten nuclear war over this cyber attack, given the list is mostly populated by their allies including China.

Russians perpetrated the SolarWinds hack and now Colonial Pipeline. In both cases Russian citizens attacked private corporations causing vast social implications. There is no indication at this point that the Russian government was involved in either attack, both are cases of criminals being criminals. The need for cybersecurity is greater than ever and growing constantly.

The hackers haven’t published the decryption keys or otherwise done anything in good will to help the situation. Many people are calling this act of war by Russia though I believe that is too extreme. Perhaps we can try diplomacy first?