This is a very disturbing story and points to the ramifications associated with an aggressive malware attack at the municipal level. Decent anti-virus software and firewalls are no longer enough. Next Generation anti-malware products and solutions are becoming more common place and more necessary to remain safe.
Also remember the importance of a sound, well tested incident response plan.
https://www.infosecurity-magazine.com/news/allentown-struggles-with-1-million/