Comment by stuntmachine

The problem here isn't whether companies are using DDoS mitigation services, it's whether they have ISPs null routing them. The weak point here at the top tier ISPs, not necessarily the individual companies being targeted. You can have the best DDoS mitigation service ever, but if the top-tier ISPs black hole you, you're in a very bad spot.