I am under the impression that attribution is a very difficult and often impossible process. If that is true, what is the point of including "Russian" in this headline? I would guess the most probable response would be something involving "fulfilling a narrative." Even if that is true, what makes "Russian" hackers more exciting then just "Hackers?" I am not trying to pose some profound question. I am genuinely confus…
It's all about what ultimately happens to the information harvested. If it's some kids in mom's basement doing it for lulz, that's not very concerning.
But, presumably, Russian hackers, even if not actual Russian government employees, would pass on useful information to their government. Even if non-classified, that could be very damaging to national security.
From the article, the attacks were relatively sophisticated. Which makes it more likely that "state actors" were involved. The article also claims that the two most common state actors are Chinese and Russian, and the fingerprints of this operation pointed more to Russia than China.
YMMV. As you say, "attribution is a very difficult and often impossible process".