This is a very disturbing story and points to the ramifications associated with an aggressive malware attack at the municipal level. Decent anti-virus software and firewalls are no longer enough. Next Generation anti-malware products and solutions are becoming more common place and more necessary to remain safe.
Also remember the importance of a sound, well tested incident response plan.