Why would they target state governors' offices? Well, they'd presumably be easier to pwn than, say, the Department of Defence or the CIA, and a good starting point for setting up pieces.
Worse still is the possibility that this wasn't a just starting point, but mid-to-late in the distribution scheme. I imagine I would begin with corporate contractors and end up with government itself.