BPL knocked offline

common practice to not go public with details until the attack is at least contained, if not yet recovered from.

And no, the notion that the perpetrators will be tracked down and brought to justice is not probable. Cryptocurrency makes it harder to follow the money trail these days. Even if law enforcement can figure out who did it, most attackers operate beyond the extradition reach of their targets, and Putin, Xi, Kim and Khamenei aren't cracking down on local cybercriminals who cause problems in rival states. Their intelligence services, when not mounting attacks themselves, are likely aiding and abetting the cybercrime gangs with tech and talent. Kim is probably mostly funding his regime with ransomware profits these days.

I also doubt it's the work of native seditionists. They don't seem like the tech-savviest bunch to me, short of organizing physical attacks with laughably poor operational security on social media. The far more obvious explanation is garden-variety cybercrooks, likely operating out of Russia, sure, but for profit and because it's the most popular safe haven for them, not geopolitical ends.

You attack libraries, municipal governments, and other public institutions because of the pressure to pay up quickly, as it's embarrassing to local officials. It's not because you think it will bring down the local chapter of Anteeeeefa, even if it's common knowledge that they organize their nefarious schemes in public libraries.