I suppose if I point out a government hit by ransomware and forced to run with pen and paper just last year[1], an attack on a nuclear power plant which could have been targetted at power generation[2], an attack taking down 1/5th of the world's ocean freight and a company with enough annual revenue to be in the top 100 countries by GDP[3], or a classic software bug taking out power to 45 million people in the USA for two weeks[4], you're just going to claim those aren't important because they didn't "literally" shut down every operation in an entire country, or weren't deliberate attacks trying to do that, and therefore they aren't evidence that it could happen?
[1] https://nunatsiaq.com/stories/article/government-of-nunavut-...
[2] https://en.wikipedia.org/wiki/Stuxnet#Iran_as_a_target
[3] https://www.forbes.com/sites/leemathews/2017/08/16/notpetya-...
[4] https://en.wikipedia.org/wiki/Northeast_blackout_of_2003