Cyber-security firm identifies attack on US federal commission