Dr. Richard Browne:

As I said, the threat actor largely named as being responsible for it is regarded as being based in Russia. Whether it was the Russian state is a different question. We cannot substantiate that. The other reason attribution is challenging is when one tells the world one has found an incident, one has also told the world how one found the incident. Tradecraft and capability is given away.