Where I work--not top secret, no great protector of national interests--we're routinely phished. We try to avoid it, but since there are a few hundred employees every week a few of us get our computers hacked. Click on the wrong link in spam that looks authentic, and you're toast.
We're not targeted. Our emails wound up in a database of emails that the hackers use. My personal email account's routinely the subject of attempted phishing, mostly because I've used the same email address since 1999. Can't imagine how many hacker databases it's found its way into.
The hackers of my personal appear to be mostly Chinese. Why? Who knows. No idea who's behind the phishing at work. A lot of the phishing is opportunistic. If they got my work emails, they'd yawn. But who knows what email addresses they'd get and who they could spam? The claim that the Russian hackers (who weren't military or FSB, but each of which routinely cooperates, the story goes, with either the military or the FSB) targeted the DNC requires more proof than I've seen--it entails that they specifically did not send those emails to non-DNC people.
The Android hack was more specific, apparently.