Re: To DDoS or not to DDoS?
Maybe they are taking the position that they want to know if anything untoward has taken place before saying anything.
Last thing they want is to say "it was only a ddos attack, no problems here" and then have to retract that because a real hack took place.
There could be other similar reasons too.