I just simply do not believe that the Russian government is behind this (I also do not believe that Kaspersky Antivirus is evil either). This smells like another false flag that the government creates before going to war. It has a tendency of doing that.
Since Energy and Water is a potential terrorist target for a very long time it should have the best security one can find and anyone being able to break in is a reason to be ashamed and to fire a couple of guys.