Violating US law by attacking a US company would certainly be seen as an act of aggression.
US companies get hacked all the time...have you not been reading the internet over the past, oh, 10 years?
also, there is still big doubts that the NK's did this.