Companies will never spend money on computer security until after major public breaks happen, and probably not even then. The people in charge just don't get that it's cheaper to spend money on IT before shit blows up, rather than after.
Expect no real changes at these water treatment sites, except maybe some password changes.
The Florida Piney Point (incoming) ecological disaster is just one of many waiting to happen in that state, but it's Republicans in charge so nothing will be done until afterwards, and even then it'll be nothing useful. Right now they are just pumping the water into the local waterways, hoping to not lose the whole facility.