Other than occasional timeouts, the main impact for my team is event logs are ~24h behind.

I asked if we should expect any security-related impacts, and they haven't taken a stance yet on whether people should worry.

It's probably paranoia from dealing with Heroku last year, but the unwillingness to share more info "due to the nature of this issue and the security of our platform" doesn't sound right for a dos