Yeah, I'm guessing they're going for steady income over risking a serious retaliation. If the hack is serious enough, there will be consequences.
So it's a spectrum
The administration left it alone for days saying they'll let private business sort it out. (Default investigation notwithstanding.)
When a bunch of news media started reporting the group was Russian and then insinuate it was a state sponsored attack, DarkSide said something along the lines of, "We didn't realize this would start geopolitical conflict. We will be careful to vet clients more carefully in the future."
The FBI investigated the crime as they always do. It was treated as a standard international monetary theft.