On the hand they are still analyzing "the fault", but on the other hand they deem an external attack to be unlikely. Maybe they are in denial?

DNS is always a good guess