Very scary indeed. http://www.securityweek.com/one-third-industrial-networks-connected-internet-study
Over networking is the problem. I've worked in places where people who deal with customer accounts are on the same network as developers, and internet. Sounds ludicrous I know, but its a fact. Over the years networks get bloated, everyone wants internet access and the IT guys just have to try to keep it working.