"The investigation revealed that the infected PC belonged to a user who was connected to the Internet connected network used for administrative purposes. This is isolated from the critical internal network."
The article explicitly states that there was no air gap at play here.
Definitely jumping “air gaps” is something that needs big player involvement.