Glad you enjoyed my... intentional... Easter egg for the grammar-conscious..

DDoS needs to be packaged with other, more sophisticated attacks to be anything more than a temporary disruption. DDoS is the car parked in across your driveway. While you're arguing with the driver, someone else is hauling your TV out the back door after smashing a window to gain entry.

Assuming whoever set his systems up isn't a complete nonce and didn't deploy all the components on a single internet-facing host, the most likely scenario is that either the DDoS attack is a read hearing, and the email was exfiltrated by other means, or the web server was compromised as part of the DDoS and was used to stage attacks on other hosts on the network. Maybe they guessed or got hold of the admin passwords, maybe they exploited an application or OS vulnerability.

I'll chime in with my own Tower sob story from a few months back - apparently if your carpet is glued to the floor, it's covered by the policy, if it's tacked it counted as a chattel (and not covered).

I am (yet another) person on this thread who will not be signing a renewal with Tower next year.

Nothing out of the ordinary there, in fact it seems one of the mouth-frothers now has their own blog on stuff. Maybe they ran a competition.

A rather sad total of 22 min, 29 seconds of actual news items in a one-hour bulletin.