The machines were engineered to report stock counts back to central servers, but that same network connectivity created a critical vulnerability. Hobbyist developers quickly reverse-engineered endpoints connected to the official vending machine locator. By querying local machines every few minutes, automated bots could detect sudden inventory drops or restock ticks.
When a field technician loaded fresh booster boxes into a machine, local subscribers received instant push notifications with exact addresses. Within 15 minutes, a line of buyers would snake past the customer service desk.
The human cost fell squarely on frontline supermarket staff. Store employees reported relentless phone inquiries, aggressive confrontations from shoppers demanding to know the third-party vendor's route, and physical scuffles in vestibules. Because the machines belonged to an independent vendor, store managers could not alter limits, clear mechanical jams, or control the dispensing rate. The terminals generated minimal lease revenue for host stores while producing outsized operational headaches.
