Re the hack. It was a while back, but was troubling. However, they're willing to sign HIPAA Business Associate Agreements, which for my company's purpose mitigates those concerns... they're willing to be on the hook for host & physical security.
Re the DDoS. As a mitigating factor, the DDoS was rather intense. It actually took their upstream provider offline. They supposedly have mitigated it with redundant connections and orders of magnitude more bandwidth at the two hardest-hit locations (Atlanta & Newark).
That said, time will tell. I love pretty much everything about their service (hardware, interface, bandwidth, cost), but I've got a business to run... if there's more extended downtime, I'm gonna have to move, though I won't like it.
Digital Ocean and Vultr were the two I was looking at, though don't really know much about the popular opinion of Vultr.