Well we all know that the overall security is weak against cyber attacks when it comes to the USA. There have been just so many hacks in the past.
I'm not sure why this is happening. Haven't they learned their lesson?

I really doubt that China would hack their records and then sell it on the Deep Web. That doesn't make much sense to me.
However, the US is known for pointing fingers everywhere.