Well, we have the death penalty too. But that hasn't made a scratch in the murder rate.
Hackers have 364 ways from Sunday in messing with people. The very act of hacking itself is a federal crime and I'm sure whoever's behind it knows it and does not care (although granted, this is pretty exceptional.) They found an IP address, but they have to figure out if it's real or spoofed. Or routed through some proxy or whatever. And that's not even the beginning of it. The person doing it may not even be in the US for all anyone knows and that's another possible wrench in the works. If the person is in Canada or any place with an extradition treaty, that's one thing. If not, it's too complicated to even think about.
I guess the best anyone can do is tighten things up on their own end.