There is also Gwynn ap Nudd of the Tylwyth Teg court docket, a group of Welsh Wyldfae separate from Kringle and Erlking. Initially, the leak was attributed to APT28, a team tied to Russia's GRU armed service intelligence directorate.