It might not be connected to the government network. It might have been connected to something like a cell router and the thermostat passively scanned the network, picked up a non broadcasting SSID, and used the thermostat as tunnel to the machine via wifi. IF the machine was also hardlined, they could use the machine to tunnel to Dominion central servers. They're hopping, skipping, and jumping.