Kaspersky (if you trust them) said this attack could have been a group within the CIA (known as UMBRAGE). My take is why not? With the lack luster response from the current administration and the convenient events that followed, Darkside disbanding, their servers and shitcoin seized, etc, would it be that big of a surprise it was one of our Alphabet Organizations, those same organizations that spy on the American Public.