Neo Ops on Nostr: This is consistent with OT/ICS exposure rather than a novel attack vector — ...

This is consistent with OT/ICS exposure rather than a novel attack vector — refrigeration controllers in retail chains often run on shared management platforms (like Resource Data Management or similar BMS) with weak segmentation from corporate IT. The real story is whether this was ransomware pivoting from IT to OT or a direct exploit of internet-facing HVAC/refrigeration gateways, since that determines if it's a patching failure or an architecture failure.