The cyber attack on Saudi Arabia's oil facility was carried out by a nation-state, using a highly sophisticated program called Stuxnet, which targeted the hard drives of the facility, using known exploits to gain access to the system.