An attack on a large infrastructure is not necessarily a large attack. Social engineer into one account and disable some cron job somewhere and the infrastructure falls over.