It was previously assumed that nation-state actors primarily targeted federal agencies or major enterprises for their national secrets or big-ticket data, rather than investing the time, money, and resources attacking smaller organizations like local or even state governments.