"if you're not from the US, I feel like you should have known that was a possibility."
Known exactly what was a possibility? In another comment I brought up Endgame Systems, here is some of their offerings:
'There are even target packs for democratic countries in Europe and other U.S. allies. Maui (product names tend toward alluring warm-weather locales) is a package of 25 zero-day exploits that runs clients $2.5 million a year. The Cayman botnet-analytics package gets you access to a database of Internet addresses, organization names, and worm types for hundreds of millions of infected computers, and costs $1.5 million.'
When you say 'foreigners' should have known the NSA "doing their thing" so to speak is a possibility, does that include them being exploited, or their stolen financial/personal information on botnets being used by the NSA?