I'm surprised it didn't happen already
It's obvious IoS thingies will be used to propagate ransomware if possible. If IT security is often a weak point on companies which don't want to pay to deal with the risk, OT is way way worser in term of security, because it's often managed by non-IT people who know nada about cybersecurity.