LOL @ $3 million dollars, 10 programmer, and six months...
I design and program industrial control systems, including a number of other SCADA systems, PLC's, and DCS's. Trust me, it's not hard to screw them up. You think software crashes are a hassle? Try working in my field were it's an accepted common occurrence (at least during development). Poorly written code, and network infrastructures open the door to any number of ways to attack a control system. For that reason they are usually completely disconnected from the internet, or other networks connected to the internet. Hence they needed a USB stick to get the virus in.