Perhaps. I wouldn't discount actual ddos, though. Sounds like exactly the sort of thing I'd have done in my youth (if I had had the skills) if I would've disco

Perhaps. I wouldn't discount actual ddos, though. Sounds like exactly the sort of thing I'd have done in my youth (if I had had the skills) if I would've discovered lax security in my own building's systems and it pissed me off. IOT companies don't tend to have bug bounties et al, and shutting off the heat to some buildings seems like a mostly harmless way to get some publicity for the issue.