Also found this from someone involved in the hack: https://social.hackerspace.pl/@q3k/111528162462505087
This bit is pretty interesting:
One version of the controller actually contained GPS coordinates to contain the behaviour to third party workshops.