text: "It would appear" that you know very little about information security. Private industry is victimized by malware on an everyday basis. Being infected by some variant of a virus that has been around for a while does not automatically mean the organization was negligent or that its employees were inferior.  That could be the case, but there certainly isn't enough information in this article to conclude that it is.