That, or they want to give themselves another plausible excuse for why they've lost everyone's money again..."Oh no, DDOS attacks, we were compromised, all of your money is gone...even though it was never on the web server to begin with and nobody could have accessed our wallets by doing it..."