You can buy an ATM and have it shipped to your house.

Apparently, there is little meaningful verification that an ATM is secure before people start using it.

The target was randomly chosen, and a second company's ATM was breached in a completely separate fashion.

This was simply a publicity stunt for a security research company.

etc.