“As important government systems have been targeted, then in case the operation is attributed to a state, this could count as a violation of sovereignty,” said Tomas Minarik, a legal expert at Nato’s cyber defence think-tank, the CCDCOE in Tallinn. “This could be an internationally wrongful act, which might give the targeted states several options to respond with countermeasures.”