We were also affected by this on a major e-commerce site. It was a .se domain.
Their post mortem isn't really convincing ( https://news.gandi.net/en/2017/07/report-on-july-7-2017-inci... ) since they do not state what really happened and how it can be prevented again.
I issued a support ticket to aws today to see what measures can be taken, otherwise we might need to change registrar.
I issued a support ticket to aws today to see what measures can be taken, otherwise we might need to change registrar.