They don't seem to know who did it, but they already know that the hackers were state sponsored? That seems really fishy.
It definitely seemed fishy. But I gave them the benefit of the doubt simply because it is a very serious allegation, one that a sophisticated company would not throw around too quickly. There should be some form of punishment (monetary, public shaming) if it turns out to be baseless.