A hacker used the internet to access an employee’s laptop.  This enabled the hacker to use the employee’s remote access to install a virus and spyware in the water plant computer system.

The company eliminated remote access to the system.  All passwords were changed.