I wonder how you could figure out it was [state]. Was there some clear threat made? A blackmail "do this, or else.."?
The attribution wasn't subtle - a substantial fraction of Baidu's ads/analytics traffic served to domestic Chinese users was rewritten to hammer that specific repository directly.
NYT coverage at the time: https://www.nytimes.com/2015/03/31/technology/china-appears-...