Non-random thought: It wasn't a cyber-attack.
?? Theory ??
Why do I say that? --Because it's the excuse that the press is reporting.
Cyber attack = cover story.
Elephant in the room, you don't put something that big and that crucial online, at best it will be on a limited line/node intranet that is air-gapped from the internet, if anything related to it is put online it will at most be CCTV and pressure/movement/flow/temperature sensors(and those are likely to be connected to the control system through a separate line so that there is no inter-connectivity between the data going online and the data the control system receives).....
didn't they see the movie Blackhat?