From Microsoft: Russian Operation Targeting US Political and Nonprofit Organizations

Is it because of the value of these organizations or the fact that nonprofits may have less attention to their security or both (or neither)?

Read more here.