> The subsequent message about Russian activity could be a coincidence–Internet background noise

These weren't random login attempts. It says the Russian login attempts had the correct login credentials of newly created accounts.

If the article is correct, the accounts were created and then shortly afterward the correct credentials were used to attempt a login from a Russian source.

That's a huge issue if true. Could be that someone's laptop is compromised.