There's no way to know that there was only one party involved.

In other words, who's to say that the NSA (/GHCQ,etc) was the same party that ultimately defaced the website?