It's been my impression that the US and Russia conduct various sorts of covert mischief such as this, but it's usually under the radar.
"Hacking" an insecure email server configured by campaign volunteers or other non-technical people is not exactly what would qualify as a "state sponsored attack".
(edit: if you disagree please explain why rather than simply downvoting)