They had the opportunity to search within unlocked computer and devices. Found money.
I would have expected a sweet homelab with lots nd lots of hardware to try the ransomware on, in a more "bachelor" environment.
No one has actually stopped REvil hacking operations. There's been a lot of drama with their affiliate programs that are probably not government related. This Reuters article is giving the government a tiny little more credit than it deserves.
Here is an article with some more information: https://www.zdnet.com/article/revil-ransomware-operators-cla...
"The server was compromised, and they were looking for me," 0_neday wrote on a cybercrime forum last weekend and first spotted by security firm Recorded Future. "Good luck, everyone; I'm off." [1]
[1] https://www.reuters.com/technology/exclusive-governments-tur...
For the same reason they don't go after local business in Russia, because of the 'cost'.
Russian doesn't gain anything from having it's citizens attack US hospitals.
Extreme option: Follow the precedent Russia has set, synthesize some Novichok, and have someone pay them a visit.