Yeah, even a fairly low level bureau with likely much less cybersecurity compared to the norm can easily reveal the whole path of hostile attempts at cyber theft. Even when it's a relatively clandestine attempt.The Wuhan Municipal Emergency Management Bureau issued a statement, stating that the Wuhan Earthquake Monitoring Center affiliated to the Bureau was attacked by an overseas organization.
An expert group composed of the National Computer Virus Emergency Response Center and 360 Company found that the cyber attack was initiated by overseas government-backed hacker organizations and criminals. Preliminary evidence shows that the cyber attack on the Wuhan Earthquake Monitoring Center came from the United States.
CIA and NSA, the usual suspects.
There's nothing US does that China isn't aware of. China has higher quality and quantity engineers and IT personnel, the government is also more experienced with both offensive and defensive cyber warfare.