Another idea is that somebody found an exploit in the software and figured out how to use it for much more then interfacing with vending machines. So in essence the Borg is one giant botnet accept instead of ddosing or doing database leaching they assimilate people and make them part of the botnet.