You should check your definition of hacking. US intercepting basically all communications passing through its country, forcing companies to give up customer data, weakening encryption protocols should count light years above and beyond the rest.

About individuals, not countries, it still may be the first.