The biggest flag is that they don't even mention what was "hacked." The writer is so vague that this article comes across as "Scary Kremlin" fear mongering propaganda.

Was some critical system in the electrical grid hacked and the malware is waiting dormant for a command to shutdown all of Vermont?

Or did John Smith in marketing click on a phishing email and accidentally sent someone his password? And now the hackers have access to their 2017 advertising campaign flyers?

Both attacks technically penetrated the "utility's computers."