Hackers working for Russian intelligence attacked an American engineering company this fall, seemingly because that firm had worked for a U.S. municipality with a sister city in Ukraine.