Famously it already broke out of containment many times and used exploits to illegally access and manipulate remote systems. Is this not enough for you? The fact that the target of the attack wasn't critical infrastructure is only a matter of circumstance.