they haven't mentioned if an API (or, endpoint) is being DDoSed, just an incident update?