James Clapper actually said...
the theft of the OPM data, as egregious as it was, we wouldn't necessarily consider it as an attack.
Context
Clapper clarifies the classification of the OPM data breach as espionage rather than an attack.
09/28/2015