They probably did not patch their firmware in years and have their SCADA systems live on Shodan with default passwords...allegedly...
"115 batshit stupid things you can put on the internet in as fast as I can go by Dan Tentler" - https://youtu.be/hMtu7vV_HmY