I wonder if it would be appropriate to "dramatically overreact" and send in the SAS or similar to send a polite message that mucking with the NHS is really not a good idea.
Maybe post offer a decent reward - say £10 million for information leading to the identification of the culprits.