Water and wastewater systems were particularly vulnerable to attacks leveraging internet-exposed ICS, with exploitation possible in almost 50% of human-machine interfaces used by such systems even without authentication.
Article Link: Internet-exposed ICS significantly more prevalent in the US | SC Media