According to Haber, it is not possible to identify one entity as culpable for the loss of data during an attack. Of course, the threat actor is ultimately accountable but targeted attacks using nation state scaled tools will almost always get the desired data; even with near perfect defences.