A utility worker's laptop suffering an intrusion is something that should be investigated earlier, rather than later.

I'd rather hear about false alarms, early and often, since I'm not convinced that critical infrastructure is actually insulated from attack at all.

Electricity and water infrastructure is almost certainly in terrible shape, based on what we've learned about lead in Flint, Michigan and what's remembered about the 2003 blackout, and Enron.

Knowing this, and hearing not very much about what's being done to modernize essential utilities, I'd hate to find out that a massive accident was caused by someone's idea of modernization being a PHP web app prone to SQL injection running inside a docker image, as a rube goldberg facade wrapping a galaxy of SCADA controllers.

This is the kind of thing people should get noisy about, since there's been pretty much only silence and very little "disruption."