What is the appropriate response to a state-backed cybersecurity breach? Most governments make no public response whatsoever, choosing in many cases not to even acknowledge the incident has occurred, but for more than a decade, the U.S. Government has experimented with a variety of different legal, technical, and economic retaliatory tactics. This talk will review three different sets of responses by the United States: indictments of state-sponsored hackers, technical take-downs of state-affiliated hacking infrastructure, and economic sanctions aimed at cutting off revenue to state-backed entities responsible for cyberattacks.