Some things should just never be connected to the internet in any way, shape or form, regardless of how "inconvenient" or expensive doing it the old fashioned way would be. Critical infrastructure is called "critical" for a reason. It means you can't afford to lose it.
That's because they failed to air gap properly. Someone got in there with a USB stick and infected the system, either wittingly or unwittingly. When I say they should run critical infrastructure the old fashioned way, I mean the analog way i.e. with wrenches and crowbars instead of microprocessors and ethernet cables.
Some things should just never be connected to the internet in any way, shape or form, regardless of how "inconvenient" or expensive doing it the old fashioned way would be. Critical infrastructure is called "critical" for a reason. It means you can't afford to lose it.
That's because they failed to air gap properly. Someone got in there with a USB stick and infected the system, either wittingly or unwittingly. When I say they should run critical infrastructure the old fashioned way, I mean the analog way i.e. with wrenches and crowbars instead of microprocessors and ethernet cables.
Even if they were on an intranet, they'd get taken down by diversity hires spies.