Yes, that's not very well done: when you are handling big IT services, you need more than "a person wrote a scary thing on twitter" to justify such an impacting action
After all this is done, CERT-EU isn't going to write the defense of your actions for you.