Documented state-level kinetic computer security attacks go back a lot further than you think they do.
Zetter's Countdown to Zero Day points to that with skepticism and also talks about Kosovo as one of earliest cases, as does Sandworm.
Do you think this is roughly correct?