Hi. It's Iain from the BBC here. I wrote the piece. I took your comments on board and changed the line about DDoS leaving sites more open to attack.
The story now states that we don't know if Lulz went beyond a DDoS and took other info from the servers.
Cheers