They are saying this attack was sustained. In which case how was the data stolen?
It looks to me like they were distracted by a DDoS, that is the sustained bit. Instead of pulling the servers, they were focused on that and missed the penetration. They handled it badly.
On another note. How do you DDoS a frikin ISP.