https://www.bbc.com/news/technology-51564905
A malicious link sent to staff at the facility eventually caused the shutdown “of the entire pipeline asset”.
It was so severe in part because the organisation was not prepared for such an attack, the DHS statement said.
Often, the “operational network” which runs computers in the factory is separated from the office IT – but not in this case, meaning the ransomware infection was allowed to spread.