I'm a bit shocked about all the uninformed arguments in the comments. Maybe I shouldn't be, because apparently basic infosec is a foreign language even to large supermarket chains and commercial freezer manufacturers. It's 2026, why the hell would you have critical systems exposed to the internet? In.. "normal" industries this wouldn't just be reasons for immediate termination, this would be a civil lawsuit for recklessly endangering company assets. I'm genuinely flabbergasted. And then it happened, AND IT HAPPENED AGAIN AFTER THREE WEEKS. Why did they not pull the plug at the very second they learned about the first incident?

I'm not happy about the attacks, but it sure seems like someone needed a wakeup call.