"And Hafnium's victim list appears more limited to small- and medium-sized organizations, whereas the SolarWinds hit large US government agencies."

//Why a state-sponsored hacker group did this?