The successful hack of America’s largest gas pipeline has exposed gaping holes in U.S. cyber defenses, experts say.

The weaknesses have been known for years: Eighty-five percent of American critical infrastructure is owned by private companies, and few regulations govern how those companies must protect their computer networks.