Pushed off to the Treasury Department but finally we are going to confront (and admit) the reality most of us knew:
CNET

The White House has announced sanctions against Russia over the "most destructive and costly cyber-attack in history."

The US government announced these sanctions on Thursday morning, calling out several Russian hacking efforts over recent years, including the Russian propaganda campaign, Yahoo's massive hacks and attempted cyberattacks against electrical grids in the US.

The most critical cyberattack listed for Russia's sanctions was NotPetya, a malware designed to destroy data disguised as ransomware. The Trump administration attributed the attack to Russia on February 15, and said it caused billions of dollars in damage in Europe, Asia and the Americas.

The sanctions come from the Treasury Department against multiple entities in Russia. The investigation came from the Department of Homeland Security and the FBI. Sanctions include blocking assets from Russia's intelligence services.

Investigators also announced on Thursday that they've found evidence of Russian attempts to hack into the US electric grid through spear-phishing tactics.