Petrobras is very close to 50% owned by the public, but okay. There's plenty of other examples including the IT systems of various private firms around the world, Stellar, Cetel, IABG, Huawei, Deutsche Telekom, even some multinational companies based in the US.

> What was done to Sony is entirely different as well - this was a clear effort to cause damage to them, not a means to gather intelligence.

100% agree. It is very different and establishing boundaries here is an important keystone to US cyberwarfare norm efforts. Unlike other posters I would separate sabotage from 'corporate doxxing' - Stuxnet then is very different.

> broadcast services are only legitimate targets for attack under the Geneva Conventions if they are of fundamental military importance

Which depends on the perspective - as the State Department was involved with SONY in the development of "The Interview" and the US is well known for international propaganda, I could well understand if another nation state considered the private company partners to be an extension of fundamental military importance (and certainly the US considers it a keystone of international efforts and calls it "Psychological Warfare").