If the attack was carried out over one IP address, they should have been able to detect it.
There is no real reason why 7 million different accounts access the site from one location.
I don’t know how sophisticated the attack was but the future threat is instead of DDOS attacks would be distributed ACCESS attacks where millions of controlled devices attack a site with known credentials to download small bits of information over time. Even better if you can work out ahead of time the account’s general location and then assign devices in the area to access that account.
If the attack was carried out over one IP address, they should have been able to detect it.
There is no real reason why 7 million different accounts access the site from one location.
I don’t know how sophisticated the attack was but the future threat is instead of DDOS attacks would be distributed ACCESS attacks where millions of controlled devices attack a site with known credentials to download small bits of information over time. Even better if you can work out ahead of time the account’s general location and then assign devices in the area to access that account.
That kind of attack is already a thing; whole it will most likely remain one in the future, it is one in the present as well.
yeah, pretty sure they didn’t think of that