I haven’t been following this story extensively, but when did we conclude that SVR was behind the hack? Schneier writes as if it’s a certainty. Why is it alway

I haven’t been following this story extensively, but when did we conclude that SVR was behind the hack? Schneier writes as if it’s a certainty. Why is it always FireEye blaming the Russians, and why do they never share their evidence of attribution?