A compromised refrigeration and air-conditioning company may be the starting point to one of the worst security breaches in the US.