I'm pretty suspicious of the foreign-government claim myself. The Russians and Chinese seem more interested in documents and dossiers than user accounts. For instance, the break-in at the Federal Office of Personnel Management appeared to target files pertaining to security clearances.
Some of the follow-up coverage suggests that data from the Yahoo breach were appearing on underground sites that deal in identity theft. That seems like a much more plausible motive to me. I'm guessing Yahoo was trying to use the recent breaches at the DNC as a distraction in the hope that people would see this as an attack by sophisticated hackers, not guys trying to sell credit-card numbers at $1 per.
|