There is a fair amount of public evidence lying around tying the hacks to Russia or at minimum Russians, including CrowdStrike's recent report about Ukrainian artillery. Considering that, it seems more likely that US intelligence has their own evidence, as they claim, than that they're simply making things up (at the risk of substantial embarrassment).