The hackers sent multiple emails in recent weeks to U.S. government agencies, business organizations, law firms and at least one foreign government, according to the panel.