The title should read something like "Initial victims". The article isn't claiming there weren't any victims; it's just the opposite, that there were multiple (5) primary sites affected by the attack, which they attempt to pinpoint and analyze.
I guess the chose the title by analogy with the term "patient zero", since "patients zero" wouldn't have quite made sense.
The article itself also calls them "patients zero" or "original victims": "Perhaps an analysis of their activity can explain why they became "patients zero" (the original, or zero, victims)."
I guess the chose the title by analogy with the term "patient zero", since "patients zero" wouldn't have quite made sense.