We need to have a French Revolution for hackers that do this. One clobbering, and they will think twice.
The first time we found a provable case of malicious hacking, whether by individuals or nation-states, the result should have been the termination of that entity. Nothing says "stay out of my network" like a bloody head on a fencepost.
How low must one go to do such a thing as attacking a blood bank? Of course, some of these low people are also low life governments.