Two very different “blimey Charlie, ave a banana” moments from the article:

“A fruit and vegetable wholesaler in London was also affected but prevented the attack from escalating by pulling the internet connection to its cold storage units out at the wall”.

And

“The attackers attempting to take over the dummy controls remained anonymous, but most of the authentication attempts used the manufacturer’s publicly documented factory-default username and password credentials”.

Going to point out these fridges and the monitoring systems have security updates.

You will find those affected didn’t apply updates, or apparently change the default password.