It sounds pretty plausible. But, I'm not sure what benefit that gives them? The article says the cameras are trained on public spaces. So in principle they (China, Russia, etc.) could get the same information by having an agent just hang out there (yeah, I know, the same can be said for the DC Police). So pwning the CCTV cameras probably doesn't give them access to any sensitive or novel information.