With the OPM breach and the Equifax leak the Chinese have the personal details and biometrics of millions of Americans who work for the government in areas that handle sensitive information.
The Russians have already specifically identified US cyberwarfare individuals before. So, it can be done and has been done. With the information the Chinese already have it is very unlikely they could not do the same, but they'd gain very little from it. (The US doesn't gain much and should probably stop the practice also.)
https://docs.google.com/spreadsheets/d/1-YhLDDrFIPlVVXG3EkpA...
Recently there's been a lot of speculation that Shadow Brokers were in fact the "second source". That may or may not be true.
>I mean it's pretty obvious the Shadow Brokers were aligned with foreign policy interests of the Russian government
It's really not. Unless everything anti-US fits that mould, but then we'd have a plenty of other governments to suspect too.