DDoS or just too many new legitimate clients?
I think it's best to take their statement at face value. I have no special insight into the organization.