So this a super hot take, but someone is asking for an ass whooping. This is basically an act of war. I'm going to just leave it at that. This isn't some random hack, kinetic attack demands kinetic response.
In hacker communities, it's considered best practice to avoid making enemies — a good policy.
Attribution will still be hard, but the motivation to attribute (correctly) will be much much higher than most cyber attacks.