The report itself seems to claim it provides attribution. Am I misunderstanding? > Previous JARs have not attributed malicious cyber activity to specific count

The report itself seems to claim it provides attribution. Am I misunderstanding? > Previous JARs have not attributed malicious cyber activity to specific countries or threat actors. However, public attribution of these activities to RIS is supported by technical indicators from the U.S. Intelligence Community, DHS, FBI, the private sector, and other entities. This determination expands upon the Joint Statement released October 7, 2016, from the Department of Homeland Security and the Director of National Intelligence on Election Security.