The attack was launched via an infected Word file. You can separate your internal network from the public Internet - which power companies do - but that only reduces your attack surface, it doesn't eliminate it. Attack vectors are still available.