In 2016, NATO said they would regard that a cyber-attack against a member state will result in article 5 being activated. Crimea and Ukraine are not included in that. If he had attacked a country that was a member of NATO, would we have activated article 5? We don't know because he didn't do it, and he didn't do it because he's not stupid. That's where we stand.
If in a year's time he does attack one of the NATO countries, what's going to happen? I don't think we've even planned that far. I don't know what NATO is doing, obviously, because I'm just a normal individual, but he didn't attack a NATO country so article 5 was not activated.