Is it safe to assume all these networks have been pwned by, at a minimum, the Russians, Chinese and Israelis as well as, in all likelihood, a not-insignificant number of tech-savvy criminal syndicates.
Now those agents can do other things.
A state actor could probably own them one at a time through the AP, but its unlikely that is what happened here.
http://fusion.net/story/212802/haunted-by-hackers-a-suburban...
For some reason there has been zero coverage that 10,000 databases were open to be ransomware.