Internet connected can be useful in commercial environments. When designed properly it isn’t a issue unless someone is really motivated.

The problem is the lack of a Firewall and network partitioning. The vendor was extremely sloppy in the design and security configuration which made it trivial to attack.