You assume there must be some nation state behind it.

But it could be just for the lulz.

Remember the hackers behind the seven proxies, AntiSec, which hacked the NATO library website, and went to prison for it.

https://en.wikipedia.org/wiki/Operation_AntiSec