UK government weighs action against Russian hackers over NHS records theft

I had always wondered how much "Action" weighed.

Its not been made clear in the guardian piece

They need to weigh actions against the idiots who didn’t patch their systems first. Look closer to home. Theres a project manager here to blame who can’t even turn a computer on without calling the IT helpdesk.