Comment I'm Romanian and this is BS (Score 5, Interesting) 52
It was sheer incompetence from the authorities. Unpatched CVEs from 2021, wide open internal network, extremely poor admin passwords, the whole shebang. We're lucky it was essentially a lone script kiddie that did a smash and grab looking for the AD (he's allegedly Algerian and he's been doing similar kinds of hacks before).
If it truly were the Russians, they could have done MUCH, MUCH worse. From leaking the database and exposing hidden properties of various politicians, to silently modifying or corrupting data.
Of course the authorities went through all the possible bad takes. From denying it even happened, to blaming shadow organizations (like your post does), to getting mad at the press for trying to contact the hacker. Now they are pivoting into "after all no sensitive data was lost and we're migrating it to new infra so no harm no foul".