&quot;State-sponsored actors&quot; sounds like over-specification.  If Yahoo detects a &quot;sophisticated attack&quot; from a lone jerk with a computer, do they not notify affected users of defensive actions to take?<p>It&#x27;s no doubt interesting to know that your account is being targeted by your own or some other government, but identification seems secondary to detection and response.