According to the US Department of Defense, a cyberattack is only considered an act of war if it causes physical damage.