One of the most difficult aspects of cyber security is attribution. There's really no way to know for certain who did what. Also, it's easy and convenient (right now) for other nations to blame China as cover for their own cyber intrusions. Compromise a few systems in China, launch attacks from them then sit back and watch while others place blame.